Malicious
Rar Archive
MD5: 4dce6a00bd1710acacbb9a1fe60726d7
Size: 40.47 KB
application/vnd.rar
Ctrl + scroll to zoom · drag to pan
This sample is a 39.5 KB Rar Archive for which Malva.RE's static analysis did not establish a malicious verdict. Static analysis extracted 4 embedded or derived files. It matches 4 YARA rules. Observed behaviours map to MITRE ATT&CK T1027 and T1059.005. The file was analysed statically: it was parsed and decompiled, never executed.
- SHA256
- 0cff8d7ac466629a09832cfc978fd9126d833c9ced0f5bbf429d051cedc72f8b
- MD5
- 4dce6a00bd1710acacbb9a1fe60726d7
- Verdict
- Malicious
- File type
- Rar Archive · 39.5 KB
Cite this report: https://app.malva.re/sha256/0cff8d7ac466629a09832cfc978fd9126d833c9ced0f5bbf429d051cedc72f8b
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
Rar archive
Size
40.47 KB · 40,472 B
First seen
2026-10-28 11:00 · 2 days ago
Last seen
2026-10-28 11:00 · 2 days ago
Last analysis
2026-10-28 11:01 · 2 days ago
Hashes
MD5
4dce6a00bd1710acacbb9a1fe60726d7
Sha1
19366d2b3aed9bd9cf50559d4fb6ac3c3d527048
Sha256
0cff8d7ac466629a09832cfc978fd9126d833c9ced0f5bbf429d051cedc72f8b
Sha384
e9f8680a3f501fa54ae1e3b23a7b2ecb5d2eec87ac46b94d9a9bce4abd98a4d7f8a781520df3fc452e380d3ff57fd8c4
Sha512
a499f3741e66eb7dcd0185916bfccf7a91f6848fdc6cbddeb1597e881e9aa9edeea4b298636fd6236867ae0c3050707ba026beb5a435e8eaf55d10acbaa8db76
SSDeep
768:52sU20ujtnB6PosauacCjjnHjIsXMbfUOyWAbPg90bDXgYG+2OYx:EsUSBbZ93H0s8QO2bPgcTgYZ2OYx
TLSH
D603F1B6C86568E184FCA2F5307AF87BA6E3FFF230A311642447350BCA517856DA056B
4 malicious · 4 files
RAR4dce6a00bd1710acacbb9a1fe60726d7T1027 · T1059.005
VBSRFQ PINACLE OM-JB-DNR AD-93753- JOB IN HAND.vbsT1027 · T1059.005
VBSRFQ PINACLE OM-JB-DNR AD-93753- JOB IN HAND.vbs.deobfuscated.vbsT1059.005
BIN.executed
VBS.subscript.vbsT1059.005
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
arc:rar>scr:vbs~T1027~T1059.005
Shape
arc:rar>scr:vbs
malicious
2 nodes