Suspicious
Suspect

02574123dc62b87859c6f9804c9ecf05

ZIP Archive
MD5: 02574123dc62b87859c6f9804c9ecf05
Size: 584.58 KB
application/zip

This sample is a 570.9 KB ZIP Archive for which Malva.RE's static analysis did not establish a malicious verdict. Static analysis extracted 3 embedded or derived files. It matches 1 YARA rule. The file was analysed statically: it was parsed and decompiled, never executed.

SHA256
be747f0f358ca5859937ac5354449dc4df67b0972ee28e63741b7516d6e7ef09
MD5
02574123dc62b87859c6f9804c9ecf05
Verdict
Inconclusive
File type
ZIP Archive · 570.9 KB

Cite this report: https://app.malva.re/sha256/be747f0f358ca5859937ac5354449dc4df67b0972ee28e63741b7516d6e7ef09

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential

File
Type
ZIP archive
Size
584.58 KB · 584,580 B
First seen
2026-10-21 13:46 · 9 days ago
Last seen
2026-10-21 13:46 · 9 days ago
Last analysis
2026-10-21 13:46 · 9 days ago
Hashes
MD5 02574123dc62b87859c6f9804c9ecf05 Sha1 e9e67a5209ef5426f48529dde5682d9e48983fb2 Sha256 be747f0f358ca5859937ac5354449dc4df67b0972ee28e63741b7516d6e7ef09 Sha384 298afc9b46102b7c70915bf2b39302cac97a599a812fd4af6c543e918466c7fe5f84220315b33b87fa2c3945f3e1fa15 Sha512 e5f7a050717070030ed4a3dedda368fad0b1595d26dcba2ab377da72c6fdcfbf3b7834ef8ddf5f2f73bb58d38120753bb3b8420fabd642f5ea5a9e12568957b8 SSDeep 12288:0A7iOm6Jjghf4xSfUxZ2U18/dtQlSprSp16nQAH9NNzpWRSFyorOIic/7MP0:fm6Jj6ESfUxZ91kmY/99z8wFXicTz TLSH DDC423692755F0C46206F3FC828CBCD886EF14F98B9315BAC90FA585F456257BB2218F

4 files
ZIP02574123dc62b87859c6f9804c9ecf05
CMDActivate.cmd
EXElua.exe
Structure
TXTpackage.txt
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

Structural branches: 2 STICH kept: 1secondary ignored: 1
bin 1

Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
Path arc:zip>pe:exe
Shape arc:zip>pe:exe
2 nodes

4 files
ZIP02574123dc62b87859c6f9804c9ecf05
CMDActivate.cmd
TXTpackage.txt
No malware configuration was found at this point.
Sign in or create a free account to view the matching YARA rules. Create a free account
An error has occurred. This application may no longer respond until reloaded. Reload 🗙