Suspicious
Suspect

1f1a7d1e622a018617f1d07f2a2efdc0

Share on LinkedIn
Print
ZIP Archive
MD5: 1f1a7d1e622a018617f1d07f2a2efdc0
Size: 584.44 KB
application/zip

This sample is a 570.7 KB ZIP Archive for which Malva.RE's static analysis did not establish a malicious verdict. Static analysis extracted 3 embedded or derived files. It matches 1 YARA rule. The file was analysed statically: it was parsed and decompiled, never executed.

SHA256
0e09274e88a32b92fc0825de9f2bca211adcdc8b23ce9fca66e014236c0fce1c
MD5
1f1a7d1e622a018617f1d07f2a2efdc0
Verdict
Inconclusive
File type
ZIP Archive · 570.7 KB

Cite this report: https://app.malva.re/sha256/0e09274e88a32b92fc0825de9f2bca211adcdc8b23ce9fca66e014236c0fce1c

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential

File
Type
ZIP archive
Size
584.44 KB · 584,435 B
First seen
2026-10-21 14:16 · 6 days ago
Last seen
2026-10-21 14:16 · 6 days ago
Last analysis
2026-10-21 14:16 · 6 days ago
Hashes
MD5 1f1a7d1e622a018617f1d07f2a2efdc0 Sha1 6e9a350fac21a9f03890506dff9e6edf53eb57b5 Sha256 0e09274e88a32b92fc0825de9f2bca211adcdc8b23ce9fca66e014236c0fce1c Sha384 a8e73ee78c9ff8762cc4ff24b861dc4879d09fa108fc4f4a4dde5ec9e160e39a21e98457ec3f3525d40dc17901d08d9d Sha512 b94b4827639c9f0e8805e07f46b921a285de3374e8f460a47331d5e9e5a5258043edc7cede334aa65977c75e481deb33d76642a2f0044167779c3c45f9a127a7 SSDeep 12288:eeElNtIBB2gX3U5jA7iOm6Jjghf4xSfUxZ2U18/dtQlSprSp16nQAH9N3ez0:eeSIBBfHtm6Jj6ESfUxZ91kmY/9He4 TLSH 3FC423B7179AB0897503E3E4814C6D94C9AF20D957C3436ECA1E2693F5BE247FB2009E

4 files
ZIP1f1a7d1e622a018617f1d07f2a2efdc0
TXTgenlibbc.txt
CMDLaunchApp.cmd
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

Structural branches: 2 STICH kept: 1secondary ignored: 1
bin 1

Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
Path arc:zip>pe:exe
Shape arc:zip>pe:exe
2 nodes

An error has occurred. This application may no longer respond until reloaded. Reload 🗙