Suspicious
Suspect

5c7dd6e88bec175ec8165cb8063cbdf2

ZIP Archive
MD5: 5c7dd6e88bec175ec8165cb8063cbdf2
Size: 584.48 KB
application/zip

This sample is a 570.8 KB ZIP Archive for which Malva.RE's static analysis did not establish a malicious verdict. Static analysis extracted 3 embedded or derived files. It matches 1 YARA rule. The file was analysed statically: it was parsed and decompiled, never executed.

SHA256
524384603f152f14822f5afa04b5e4eaf7c336289f7097d00ee1b0519a3a03b2
MD5
5c7dd6e88bec175ec8165cb8063cbdf2
Verdict
Inconclusive
File type
ZIP Archive · 570.8 KB

Cite this report: https://app.malva.re/sha256/524384603f152f14822f5afa04b5e4eaf7c336289f7097d00ee1b0519a3a03b2

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential

File
Type
ZIP archive
Size
584.48 KB · 584,482 B
Hashes
MD5 5c7dd6e88bec175ec8165cb8063cbdf2 Sha1 7c056f2df9054169010519a61ef3b289bf467238 Sha256 524384603f152f14822f5afa04b5e4eaf7c336289f7097d00ee1b0519a3a03b2 Sha384 5cd4ca78a4b695c8d60c7be2d784bb3a90a1d28558d15122efa126619f28a6fe468c1d371999d0bef2bdeeb733c46696 Sha512 94f15ab84a33a90afea419b9bdbf7f75770d5d6ba39724da5dac6b2e0101b8fc9b53666e907493ce620afa4225a6d03115f98d956596f2d22342540b4693ea28 SSDeep 12288:L6wlOMWROC/FTeHo22Qm7NzofOr68mfeA924EwCp:z4MQOC/gHozN7NzomW81A9q TLSH 46C42304340641D5839A2B1EAEC4A6E0BEB560DBFA1CF940AADD7ED06DE96A173C1533

4 files
ZIP5c7dd6e88bec175ec8165cb8063cbdf2
CMDApplication.cmd
EXEcompiler.exe
Structure
TXTdynasm.txt
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

Structural branches: 2 STICH kept: 1secondary ignored: 1
bin 1

Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
Path arc:zip>pe:exe
Shape arc:zip>pe:exe
2 nodes

4 files
ZIP5c7dd6e88bec175ec8165cb8063cbdf2
CMDApplication.cmd
TXTdynasm.txt
No malware configuration was found at this point.
Sign in or create a free account to view the matching YARA rules. Create a free account
An error has occurred. This application may no longer respond until reloaded. Reload 🗙