MB-73fe783e0ffada25ccd3cc0986440ab4967e4eb6ad66c4c1a0effeb16f11a702
high
📛 Threat Title
Unknown: SETUP.zip
Description
File type: zip. Size: 22672943 bytes. Tags: ACRStealer, status-russetmoor-cc, zip. Reporter: iamaachum. First seen: 2026-09-25 23:10:59.
Indicators of Compromise (3)
Each indicator is enriched from the IOC database, threat-intel feed corroboration (Threat Hunt) and VirusTotal. Click one to expand.
hash_sha256
73fe783e0ffada25ccd3cc0986440ab4967e4eb6ad66c4c1a0effeb16f11a702
IOC database
- Type
- hash_sha256
- Value
73fe783e0ffada25ccd3cc0986440ab4967e4eb6ad66c4c1a0effeb16f11a702- First seen
- Last seen
- Attached to this threat
- Appears in
- 1 threat
- Description
- Unknown
Threat Hunt — feed corroboration
Not present in any configured threat-intel feed.
Details From VirusTotal
No VirusTotal details cached for this IOC. Open the IOC page to query VirusTotal.
hash_sha1
1665b64e2b136185230d10167d428f3b6fce17a7
IOC database
- Type
- hash_sha1
- Value
1665b64e2b136185230d10167d428f3b6fce17a7- First seen
- Last seen
- Attached to this threat
- Appears in
- 1 threat
Threat Hunt — feed corroboration
Not present in any configured threat-intel feed.
Details From VirusTotal
No VirusTotal details cached for this IOC. Open the IOC page to query VirusTotal.
hash_md5
badda54507e5ae7a52fc648105742b9a
IOC database
- Type
- hash_md5
- Value
badda54507e5ae7a52fc648105742b9a- First seen
- Last seen
- Attached to this threat
- Appears in
- 1 threat
Threat Hunt — feed corroboration
Not present in any configured threat-intel feed.
Details From VirusTotal
No VirusTotal details cached for this IOC. Open the IOC page to query VirusTotal.
References (1)
-
MalwareBazaar sample page
Abuse.ch
File type: zip. Size: 22672943 bytes. Tags: ACRStealer, status-russetmoor-cc, zip. Reporter: iamaachum. First seen: 2026-09-25 23:10:59.
Remediations (8)
-
web:blog.mindcore.dk
Step‑by‑step guide to automating the Windows Secure Boot certificate update using Microsoft Intune remediations , including fallback logic, telemetry requirements, and real‑world results.
-
web:learn.microsoft.com
Learn how to deal with unwanted mitigations in Windows Security, including a process to remove all mitigations and import a baseline configuration file instead.
-
web:learn.microsoft.com
Restart your device. The system goes through auto remediation of a simulated crash and restarts back to Windows. During the recovery process, quick machine recovery test mode might require network connectivity to retrieve remediation content.
-
web:malwaretips.com
This guide teaches you how to remove Setup.zip virus for free by following easy step-by-step instructions.
-
web:support.microsoft.com
Updates for Windows released on April 9, 2024, and later updates, add the following: Three new mitigation controls that replace the mitigations released in 2023. The new mitigations controls are: A control to deploy the "Windows UEFI CA 2023" certificate to the Secure Boot DB to add trust for Windows boot managers signed by this certificate.
-
web:windowsreport.com
Windows Setup Remediation might seem to be a mysterious program, but it is actually native to Windows 10. Here we provide further details for what Windows Setup Remediation is and how you can uninstall it.
-
web:www.majorgeeks.com
So, what is Windows Setup Remediations , and can you uninstall them? We like to get to the point here, so the answer you're looking for is yes, you can uninstall Windows Setup Remediations , although we suggest you leave it alone. Remediation is defined as the action of remedying something, in particular of reversing or stopping environmental damage.
-
web:www.partitionwizard.com
What is Windows Setup Remediations ? Can I remove it? A great many people are confused about these questions. Now, get the answers from this post.
AI Forensic Analysis
Only Available for Registered Users. Sign in to view.