Suspicious
Suspect

1d505a2f1bd20f9fe989000cdcf83c7c

ZIP Archive
MD5: 1d505a2f1bd20f9fe989000cdcf83c7c
Size: 1.4 MB
application/zip

This sample is a 1.3 MB ZIP Archive for which Malva.RE's static analysis did not establish a malicious verdict. Static analysis extracted 6 embedded or derived files. It matches 1 YARA rule. The file was analysed statically: it was parsed and decompiled, never executed.

SHA256
9bfde19683db9c679fd1cfb00d01e11f7ee92ed5e64e3e64e6fdb0293fcf5c6d
MD5
1d505a2f1bd20f9fe989000cdcf83c7c
Verdict
Inconclusive
File type
ZIP Archive · 1.3 MB

Cite this report: https://app.malva.re/sha256/9bfde19683db9c679fd1cfb00d01e11f7ee92ed5e64e3e64e6fdb0293fcf5c6d

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential

File
Type
ZIP archive
Size
1.4 MB · 1,396,378 B
Hashes
MD5 1d505a2f1bd20f9fe989000cdcf83c7c Sha1 3917425e0e8d613f85e6c25a66efe70bfdc56210 Sha256 9bfde19683db9c679fd1cfb00d01e11f7ee92ed5e64e3e64e6fdb0293fcf5c6d Sha384 4e0de204373819bb21bff335a7215036af65ad46b6705709c92b7f816dfae54979155c0ebfd0f06f53224782908eb094 Sha512 cd1cec92400ed3b617c873f0da73f74ebfac57e9116aede88555327355807e39f60621b226033a8d82af371edd18ae8d0b47e40814283ac29b41cba27d4dc0b6 SSDeep 24576:Ng739m5oZjxbq9j8XJlqrGAuImQIMESQ+hcqMXHC0Clwi6/CttWaRf:NoZ9bq+MmMEL+hcjXHC/wnwdf TLSH C7553386813C18848F7A0A537AEF955C61358EFC10030C776F5558A72A3E7AFC6B499A

7 files
ZIP1d505a2f1bd20f9fe989000cdcf83c7c
CMDLauncher.cmd
TXTlibgcc.txt
DLLlua51.dll
Structure
BINOverlay_dc2f2c25.bin
BIN(folder)
BIN4
BIN19
BIN31
BIN45
BIN57
BIN70
BIN81
BIN92
EXEluajit.exe
Structure
BINOverlay_79bfa68e.bin
BIN(folder)
BIN4
BIN19
BIN31
BIN45
BIN57
BIN70
BIN81
BIN92
STICH beta

No STICH Path has been generated for this analysis yet.

3 structural branches were classified as secondary (decorative or non-determinant content) and did not produce a fingerprint.

bin 3

7 files
ZIP1d505a2f1bd20f9fe989000cdcf83c7c
CMDLauncher.cmd
TXTlibgcc.txt
No malware configuration was found at this point.
Sign in or create a free account to view the matching YARA rules. Create a free account
An error has occurred. This application may no longer respond until reloaded. Reload 🗙