Suspect
ZIP Archive
MD5: 4a8799d77df748ff1da0bd39314caab9
Size: 117.02 KB
application/zip
This sample is a 114.3 KB ZIP Archive for which Malva.RE's static analysis did not establish a malicious verdict. Static analysis extracted 1 embedded or derived file. It matches 2 YARA rules. Observed behaviours map to MITRE ATT&CK T1027 and T1059.007. The file was analysed statically: it was parsed and decompiled, never executed.
- SHA256
- 74891ac2083ea884ca690deca42d67a7fcfdb9699b3e3da319550957d49d4b2e
- MD5
- 4a8799d77df748ff1da0bd39314caab9
- Verdict
- Inconclusive
- File type
- ZIP Archive · 114.3 KB
Cite this report: https://app.malva.re/sha256/74891ac2083ea884ca690deca42d67a7fcfdb9699b3e3da319550957d49d4b2e
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
ZIP archive
Size
117.02 KB · 117,015 B
First seen
2026-10-29 21:00 · 19 hours ago
Last seen
2026-10-29 21:00 · 19 hours ago
Last analysis
2026-10-29 21:00 · 19 hours ago
Hashes
MD5
4a8799d77df748ff1da0bd39314caab9
Sha1
6d2697861b4380f7d62847c532aca012677fe43b
Sha256
74891ac2083ea884ca690deca42d67a7fcfdb9699b3e3da319550957d49d4b2e
Sha384
c466164c89a93a165067cf1d0c2b5c3c5cfbd68391b6cf7595211b7f1a65ea261bd4d420f94fdd759d5bf3e4ce0dff98
Sha512
d92b6d1cb4ac7b26b9add41910124991020c93d066c3c09844e060870c09980656eb2a29d9ee8afb3ee731886c566d6b65a13b9526d6412d213f1b15b59e17e8
SSDeep
3072:twFZ6SBG1CTDfRtsLD+STRbeyaMs1HwE8dq/Co/VHiN:mZ6aGYvPsL7BeJtwyqGHu
TLSH
D0B3124EC4ED2472DB0FE6E731CF8BB0C8954D59DB9208DA3B9848CC55FB61A1CB0296
2 files
ZIP4a8799d77df748ff1da0bd39314caab9T1027 · T1059.007
JS[ALERTA] Radicación por vencer 2026-01-01-01-02-004.jsT1027 · T1059.007
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
arc:zip>scr:js~T1027~T1059.007
Shape
arc:zip>scr:js
technique2 nodes