Suspicious
Suspect

5239c1bd1fd3c1dacca1d46810815566

ZIP Archive
MD5: 5239c1bd1fd3c1dacca1d46810815566
Size: 545.25 KB
application/zip

This sample is a 532.5 KB ZIP Archive for which Malva.RE's static analysis did not establish a malicious verdict. Static analysis extracted 3 embedded or derived files. It matches 1 YARA rule. The file was analysed statically: it was parsed and decompiled, never executed.

SHA256
aadb6595533dabb823d0237a1ff945faa63aaaba76bd2b7fcc0d7dbf22f2ec04
MD5
5239c1bd1fd3c1dacca1d46810815566
Verdict
Inconclusive
File type
ZIP Archive · 532.5 KB

Cite this report: https://app.malva.re/sha256/aadb6595533dabb823d0237a1ff945faa63aaaba76bd2b7fcc0d7dbf22f2ec04

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential

File
Type
ZIP archive
Size
545.25 KB · 545,251 B
First seen
2026-10-21 13:46 · 5 days ago
Last seen
2026-10-21 13:46 · 5 days ago
Last analysis
2026-10-21 13:46 · 5 days ago
Hashes
MD5 5239c1bd1fd3c1dacca1d46810815566 Sha1 10b47ffc9e610df314b7f51bd83cf90d2879f0e4 Sha256 aadb6595533dabb823d0237a1ff945faa63aaaba76bd2b7fcc0d7dbf22f2ec04 Sha384 de7e4710bb64b885f134ffffe57654d9194849c908d90705cdff49ea12cfe7e0156ee3d8eaf3f467cc9c1b51d85dc286 Sha512 52963442bf2baa113711ef52bcda140afbc3a25048be0d3b9b138b343a33b55658e35277eafcf501284088928e0a8d5a560867358a176f12ee4a525499ce6a64 SSDeep 12288:+wU7xz8BpJEZStUIC9j+2v/BfUbiJh/ZimKRkoeUbG8G9rkmya9d15Duy5yQ:+j7xQBEZzlCY/ubsimhQ0bd15DuyJ TLSH 62C423E3B353380F98FA02C2A9E22E89253DCFCC6157A53E897A0119B36D7775C9C525

4 files
ZIP5239c1bd1fd3c1dacca1d46810815566
CMD1Launcher.cmd
TXTprotocol.txt
EXEvendor.exe
Structure
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

Structural branches: 2 STICH kept: 1secondary ignored: 1
bin 1

Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
Path arc:zip>pe:exe
Shape arc:zip>pe:exe
2 nodes

4 files
ZIP5239c1bd1fd3c1dacca1d46810815566
CMD1Launcher.cmd
TXTprotocol.txt
No malware configuration was found at this point.
Sign in or create a free account to view the matching YARA rules. Create a free account
An error has occurred. This application may no longer respond until reloaded. Reload 🗙