Suspicious
Suspect

035e1579c1946fe4a988d35615ee8c64

ZIP Archive
MD5: 035e1579c1946fe4a988d35615ee8c64
Size: 1.57 MB
application/zip

This sample is a 1.5 MB ZIP Archive for which Malva.RE's static analysis did not establish a malicious verdict. Static analysis extracted 35 embedded or derived files. The file was analysed statically: it was parsed and decompiled, never executed.

SHA256
325a6f8423e68cf79d5dd0302f35274b2b78f7d40e17ccb2d0acf3a094b9ac84
MD5
035e1579c1946fe4a988d35615ee8c64
Verdict
Inconclusive
File type
ZIP Archive · 1.5 MB

Cite this report: https://app.malva.re/sha256/325a6f8423e68cf79d5dd0302f35274b2b78f7d40e17ccb2d0acf3a094b9ac84

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential

File
Type
ZIP archive
Size
1.57 MB · 1,566,674 B
First seen
2026-10-05 20:30 · 26 days ago
Last seen
2026-10-05 20:30 · 26 days ago
Last analysis
2026-10-05 20:30 · 26 days ago
Hashes
MD5 035e1579c1946fe4a988d35615ee8c64 Sha1 ae81e88678d47ecb6ef9dad861edc8ff0da71951 Sha256 325a6f8423e68cf79d5dd0302f35274b2b78f7d40e17ccb2d0acf3a094b9ac84 Sha384 322be293cbfaed8608ab1b004d89f648dfb76885f96ef6cff9a31a83600241c041fa6513bb5ced53e54765c036938028 Sha512 77efc0bc2d94761ff1049bbcc77d047fe5c6fe26c603d272d72097eb8a9ea1112dec039711a5ce6fd0616a3bd88f1e15e96fdc8961f8a3d45a22176b4e228d5b SSDeep 24576:vBRXkF8k510cD2UW506FT6EAIb4uEz3RrzAS/0cr/J8G9u9XYedf0nOVzfP/H33S:v0KcaUW508TBQhzR/0geGM97d8O5f3i TLSH A7753306967CB403E8B203748B4DB2ADCAC5701A0DC4CA7B5E7992619D5EED84D3CDFA

36 files
ZIP035e1579c1946fe4a988d35615ee8c64
BINLICENSE_toggle-sprint-display
BINMETA-INF
MFMANIFEST.MF
BINjars
ZIPgithub-mixin-loader-2.5.2-obfuscated.jar
BINMETA-INF
MFMANIFEST.MF
BINiywceba
BINsay3
BINuwgxdrw8hu
BIN$$0.class
BINo.class
BINoiO.class
BINj.class
BINj_O.class
BINiI$.class
BINbw8hu85v
BINdfahycjbg
BINxdssct
BINd
BINd5982d951.class
BINd824d5a7b.class
BINd56e8382c.class
BINd22ac63db.class
BINdce531460.class
BINdc9d8806.class
BINdee45458e.class
BINdf36a2ca3.class
BINd3137a457.class
BINd16be295a.class
BINd54de3be3.class
BINd12a3965.class
BINVM.class
BINVM$MemberRef.class
BINGuard.class
BINintegrity.bin
BINvault.bin
JSONfabric.mod.json
BINassets
BINtoggle-sprint-display
IMGicon.png
IMGicon.png-preview.png
BINlang
JSONen_us.json
BINcom
BINaeltumn
BINtogglesprintdisplay
BINmixin
BINGuiMixin.class
JSONfabric.mod.json
JSONtoggle-sprint-display-refmap.json
JSONtoggle-sprint-display.mixins.json
STICH beta

No STICH Path has been generated for this analysis yet.

3 structural branches were classified as secondary (decorative or non-determinant content) and did not produce a fingerprint.

bin 2img 1

36 files
ZIP035e1579c1946fe4a988d35615ee8c64
BINLICENSE_toggle-sprint-display
JSONfabric.mod.json
JSONtoggle-sprint-display-refmap.json
JSONtoggle-sprint-display.mixins.json
No malware configuration was found at this point.
Sign in or create a free account to view the matching YARA rules. Create a free account
An error has occurred. This application may no longer respond until reloaded. Reload 🗙