The 1 74 BTC Wallet Backup zip File Malware Analysis

Technical Analysis

File Name	1.74_BTC_Wallet_Backup.zip
File Type	ZIP
Magic Bytes	`Zip archive data, at least v2.0 to extract, compression method=deflate`
SSDEEP Hash	48:9qONf7a6z4OHS9E8wPKgFaWbUkCPpz5yDrHJGSKyV:gnJEJygFaWbUk2uDT7KyV
Scanner Version	1.0.216.174
Database Version	2025-05-14 20:00:23 UTC

⚠

Suspicious File Detected

Detected by 32 security engines - requires caution

This file requires additional checking for potential threats. Based on suspicious indicators, we will soon add it to our virus database.

48%

Detection Rate

2,522

File Size (bytes)

32/66

Engines Detected

2025-05-14

Analysis Date

File Identification

Hash Type	Value	Action
MD5	ca83994c798c9baddde6c67f2b53b980
SHA1	fe43a57bafdf0486c1ab8e121eaadf7a7b0131f9
SHA256	2beb86934b89fc3f60fac9f103a66382cf3655b9df8f3bd6d2af167e00fee12e
SHA512	2efe9c15153b8b1c57bc55ed694c6372204c7d0448319e8fc80bc68fef34e672492d81c8b88760e719a90c947127ff51b396f542fabe539a1b39e81d1b99a295

Security Engines with Detections (32 of 66)

Lionic

Trojan.ZIP.GenBadur.4!c Malicious

CTX

zip.trojan.generic Malicious

Skyhigh

Suspicious ZIP!lnk Malicious

McAfee

Suspicious ZIP!lnk Malicious

Alibaba

Trojan:BAT/Powedon.eb052e5c Malicious

K7GW

Trojan ( 005c47f71 ) Malicious

K7AntiVirus

Trojan ( 005c47f71 ) Malicious

huorong

TrojanDownloader/LNK.NetLoader.u Malicious

VirIT

Trojan.LNK.Heur.A Malicious

Symantec

Trojan.Gen.NPE Malicious

ESET-NOD32

a variant of Generik.MFHPELQ Malicious

TrendMicro-HouseCall

HEUR_LNKEXEC.A Malicious

ClamAV

Win.Malware.LNKAgent-10043840-0 Malicious

Kaspersky

HEUR:Trojan.Multi.GenBadur.genw Malicious

BitDefender

Generic.BAT.Downloader.N.24B4DB21 Malicious

Rising

Downloader.PowerShell/LNK!1.E77F (CLASSIC) Malicious

Emsisoft

Generic.BAT.Downloader.N.24B4DB21 (B) Malicious

F-Secure

Trojan-Downloader:W32/LnkDropper.E Malicious

VIPRE

Generic.BAT.Downloader.N.24B4DB21 Malicious

TrendMicro

HEUR_LNKEXEC.A Malicious

Sophos

Mal/DownLnk-D Malicious

Varist

LNK/Agent.HP1.gen!Eldorado Malicious

Arcabit

Generic.BAT.Downloader.N.24B4DB21 Malicious

ZoneAlarm

Mal/DownLnk-D Malicious

GData

Generic.BAT.Downloader.N.24B4DB21 Malicious

Google

Detected Malicious

VBA32

Trojan.Link.ShellCmd Malicious

ALYac

Generic.BAT.Downloader.N.24B4DB21 Malicious

Zoner

Probably Heur.LNKScript Malicious

SentinelOne

Static AI - Suspicious Archive Malicious

Fortinet

LNK/Agent.D!tr Malicious

alibabacloud

Trojan[downloader]:Win/Powedon.c Malicious

34 engines reported no threats - Only engines with detections are shown above for clarity

Remember: This is Result of Online Virus Scanner

Gridinsoft Anti-Malware has a much more powerful virus scanning engine. We recommend using it for a more precise diagnosis of infected systems. This brief guide will help you install our flagship product for more accurate diagnostics:

Download Anti-Malware

Keep Your System Protected

This file appears clean, but regular security maintenance is important

Regular Scans: Run weekly system scans to detect new threats before they can cause damage.
Keep Software Updated: Ensure your operating system and all applications have the latest security patches.
Safe Browsing: Avoid suspicious websites and never download software from untrusted sources.
Email Security: Be cautious with email attachments and links, even from known contacts.

Proactive Protection

32 antivirus engines detected potential threats. This could be a false positive, especially for system tools or packed software. Verify the file source and check if it's digitally signed by a trusted publisher.

The 1.74_BTC_Wallet_Backup.zip File Analysis

Technical Analysis

Suspicious File Detected

Scan Another File

File Identification

Security Engines with Detections (32 of 66)

Remember: This is Result of Online Virus Scanner

Keep Your System Protected

Leave a Comment

Gridinsoft Anti-Malware