Suspicious
Suspect

1bc1b0d1c7c50a189e6121f18e4620e2

ZIP Archive
MD5: 1bc1b0d1c7c50a189e6121f18e4620e2
Size: 361.48 KB
application/zip

This sample is a 353 KB ZIP Archive for which Malva.RE's static analysis did not establish a malicious verdict. Static analysis extracted 10 embedded or derived files. It matches 2 YARA rules. The file was analysed statically: it was parsed and decompiled, never executed.

SHA256
cf68a6e3c037a87ed2d89e88bb5a6ebf1f7642b38eba70762066f90874af37f4
MD5
1bc1b0d1c7c50a189e6121f18e4620e2
Verdict
Inconclusive
File type
ZIP Archive · 353 KB

Cite this report: https://app.malva.re/sha256/cf68a6e3c037a87ed2d89e88bb5a6ebf1f7642b38eba70762066f90874af37f4

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential

File
Type
ZIP archive
Size
361.48 KB · 361,483 B
First seen
2026-09-19 18:15 · one month ago
Last seen
2026-09-19 18:15 · one month ago
Last analysis
2026-09-19 18:15 · one month ago
Hashes
MD5 1bc1b0d1c7c50a189e6121f18e4620e2 Sha1 cf948c53b72ee910b277595e83006a3300b04694 Sha256 cf68a6e3c037a87ed2d89e88bb5a6ebf1f7642b38eba70762066f90874af37f4 Sha384 46d0a81c153c5837499192ae45407fc641e5ace90c2dc9ba1eb0d5352ab90747b9cc8c4d73f81b0f8006c8f8904f8be0 Sha512 cc518fe3f0a50375e4c355b6066e6b64c77ff8209e5dffc0c189211bc7f913d66c1ebab66650cdf87b50d0d43e25f181e4981480877d93b78902cf2d9c9c9149 SSDeep 6144:WgJK793xLDwXPqSfC/f2oDM2sEyGPXAcraDUQaml5k2fuUTzrOl:RJKp39Dw1fqDQTEyGvAcraYcg2DrOl TLSH 1C74E01E5E3737930C5225A01C086CC76F4027E2EF583C85047E6BADA5CBF919AE9B9D

11 files
ZIP1bc1b0d1c7c50a189e6121f18e4620e2
BAT1.bat
EXECertEnrollCtrl.exe
Structure
BINResources
BINMUI
BINID:0001
BINID:1033
BINRT_VERSION
BINID:0001
BINID:1033
DLLcertcli.dll
Structure
BINResources
BINMUI
BINID:0001
BINID:1033
BINTYPELIB
BINID:0001
BINID:1033
BINWEVT_TEMPLATE
BINID:0001
BINID:1033
BINRT_RCDATA
BINID:0000
BINID:1033
BINRT_VERSION
BINID:0001
BINID:1033
STICH beta

No STICH Path has been generated for this analysis yet.

3 structural branches were classified as secondary (decorative or non-determinant content) and did not produce a fingerprint.

bin 3

11 files
ZIP1bc1b0d1c7c50a189e6121f18e4620e2
BAT1.bat
No malware configuration was found at this point.
Sign in or create a free account to view the matching YARA rules. Create a free account
An error has occurred. This application may no longer respond until reloaded. Reload 🗙