Malicious
Rar Archive
MD5: 24316737449459636abc0282e5ab8828
Size: 24.84 KB
application/vnd.rar
Ctrl + scroll to zoom · drag to pan
This sample is a 24.3 KB Rar Archive classified as malicious by Malva.RE. Static analysis extracted 2 embedded or derived files. It matches 2 YARA rules. Observed behaviours map to MITRE ATT&CK T1027 and T1059.005. The file was analysed statically: it was parsed and decompiled, never executed.
- SHA256
- 5b241e9bf7ed3cf5dde24e7dcaeb48600ad2fb63d9647115f9165837742832da
- MD5
- 24316737449459636abc0282e5ab8828
- Verdict
- Malicious
- File type
- Rar Archive · 24.3 KB
Cite this report: https://app.malva.re/sha256/5b241e9bf7ed3cf5dde24e7dcaeb48600ad2fb63d9647115f9165837742832da
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
Rar archive
Size
24.84 KB · 24,840 B
First seen
2026-10-28 11:00 · 5 hours ago
Last seen
2026-10-28 11:00 · 5 hours ago
Last analysis
2026-10-28 11:01 · 5 hours ago
Hashes
MD5
24316737449459636abc0282e5ab8828
Sha1
d066f6f0dfaddddf23f75675b27d32e94db5ec9f
Sha256
5b241e9bf7ed3cf5dde24e7dcaeb48600ad2fb63d9647115f9165837742832da
Sha384
c0fc81b59f01864403dad708d13f4835c6d0f6a85164fc280d2a30d338df38283aa74a9d8d0a06216d4dd341ca65247b
Sha512
aae62ce0240e9d529a3b955a742789a3acf03526ae1579127af03f1094f337e0065bacf2e812322f3d92ae3030091d3c0e0c83423662f2b7180a78a3b3f5d807
SSDeep
768:3s60JET0UxojIsSu39XKMmgHIqzZm87Qspe7:0JEzoIAXFVhZm883
TLSH
A6B2D10BF78F3FD9953361912EA661FEA26623C69C79E3D34401A34A0D615E81F93C87
3 malicious · 3 files
RAR24316737449459636abc0282e5ab8828T1027 · T1059.005
VBSORIGINAL INVOICE COAU7230734290.vbsT1027 · T1059.005
VBSORIGINAL INVOICE COAU7230734290.vbs.deobfuscated.vbsT1059.005
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
arc:rar>scr:vbs~T1027~T1059.005
Shape
arc:rar>scr:vbs
malicious
2 nodes
Trace COM ordonnée
UNKNWOWNmalicious
line 1huhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential