Rar Archive file analysis – f9f8bb034275

This sample is a 26.2 MB Rar Archive for which Malva.RE's static analysis did not establish a malicious verdict. Static analysis extracted 93 embedded or derived files. It matches 3 YARA rules. Observed behaviours map to MITRE ATT&CK T1059.007. The file was analysed statically: it was parsed and decompiled, never executed.

SHA256: f9f8bb03427562dc0948d90c0324465ef9ba2d5bc63317ae650b10422bc9e0b4
MD5: 00a8c23607b51aa5cfd766a42992346d
Verdict: Inconclusive
File type: Rar Archive · 26.2 MB
MITRE ATT&CK: T1059.007

Cite this report: https://app.malva.re/sha256/f9f8bb03427562dc0948d90c0324465ef9ba2d5bc63317ae650b10422bc9e0b4

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

Unlock with Essential

File

Type

Rar archive

Size

27.51 MB · 27,505,874 B

First seen

2026-10-26 21:15 · 6 days ago

Last seen

2026-10-26 21:15 · 6 days ago

Last analysis

2026-10-26 21:15 · 6 days ago

Hashes

MD5 00a8c23607b51aa5cfd766a42992346d Sha1 197ba5f41dc5fcda283216cd3619330933dfe54e Sha256 f9f8bb03427562dc0948d90c0324465ef9ba2d5bc63317ae650b10422bc9e0b4 Sha384 6a8f9388007f95febfd71cb0feebce91aeaf73a4825eb41bea257e08a807826d5aaf7ba2f6844fa2aae1323cdf0d751c Sha512 f1c9dcb742d942b38e59cfd14aba9a5dfec8e3754a87968cebad6242f9747973ef6c619b82140047e1ce32e3d330fe3a273876ed2cd50fce46dc0d16150d0466 SSDeep 393216:uexKudoXteZZkONc4psrKfMMgUefT8Nv1borObWQxNB+GSCec3cvPqt/FEWmdEgb:/KudpLlBQ5fTSv1URQx8m/pscApUyJ TLSH 675733716CCCBD5FBA64E913EE44CB3DBD092C9CF42AF44167E0661B36A0BE9184C981

79 files

RAR00a8c23607b51aa5cfd766a42992346d

JSAgenda for 2026 26th Meeting of the ASEAN Plus Three Ministers on Agriculture and Forestry (AMAF+3) — Third Draft.exe

STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.

6 / 6

Path arc:rar>pe:exe~T1059.007>pe:rsrc>pe:exe>pe:rsrc>bin

Shape arc:rar>pe:exe>pe:rsrc>pe:exe>pe:rsrc>bin

technique6 nodes

Path arc:rar>pe:exe~T1059.007>pe:rsrc>pe:dll>pe:rsrc>bin

Shape arc:rar>pe:exe>pe:rsrc>pe:dll>pe:rsrc>bin

technique6 nodes

00a8c23607b51aa5cfd766a42992346d

Overview

Summary by MalvaGPT

Characteristics

File Structure

00a8c23607b51aa5cfd766a42992346d (27.51 MB)

File Structure