Suspicious
Suspect

5ed9b7cee2abe5c850c578d920bfc6c6

GZIP Archive
MD5: 5ed9b7cee2abe5c850c578d920bfc6c6
Size: 172.63 KB
application/gzip

This sample is a 168.6 KB GZIP Archive for which Malva.RE's static analysis did not establish a malicious verdict. Static analysis extracted 1 embedded or derived file. The file was analysed statically: it was parsed and decompiled, never executed.

SHA256
9c5e17322f347d45cb986cbae838d5e2442a658649ca7a601b04a2951e7ed85d
MD5
5ed9b7cee2abe5c850c578d920bfc6c6
Verdict
Inconclusive
File type
GZIP Archive · 168.6 KB

Cite this report: https://app.malva.re/sha256/9c5e17322f347d45cb986cbae838d5e2442a658649ca7a601b04a2951e7ed85d

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential

File
Type
GZIP archive
Size
172.63 KB · 172,629 B
First seen
2026-08-06 19:31 · 2 months ago
Last seen
2026-08-06 19:31 · 2 months ago
Last analysis
2026-08-06 19:55 · 2 months ago
Hashes
MD5 5ed9b7cee2abe5c850c578d920bfc6c6 Sha1 545e29481b7eebe67aa0edf7276790357c3de8f7 Sha256 9c5e17322f347d45cb986cbae838d5e2442a658649ca7a601b04a2951e7ed85d Sha384 95e56c9757301640e54f91d4a64f3d1432d9b3fa874b65af7d0968f5750405c33f0ef3c43ba90d7137733e1264574b5d Sha512 cec13822b590dfbbda09dc7998fa223343cae18a7f1bfeddc0b60e8bb9d0cb180145b4c42eb05311f74e32156f7ef58c5d925f61c342b3862e1368b11bd4a759 SSDeep 3072:FnEEn/SWR4zpO558xKkS5zHm3xOSXAmzWXWRSzpq5R8xK+S54627yVWM:FnHn/L2llB3/zrcRnb62y TLSH 40F3123E4610A175F85206FFF4132E01BB590BD84EB4B06BD4AEA650F8FDF1819963B9

2 files
GZ5ed9b7cee2abe5c850c578d920bfc6c6
BINpayload.bin
STICH beta

No STICH Path has been generated for this analysis yet.

1 structural branch were classified as secondary (decorative or non-determinant content) and did not produce a fingerprint.

bin 1

2 files
GZ5ed9b7cee2abe5c850c578d920bfc6c6
BINpayload.bin
No malware configuration was found at this point.
Sign in or create a free account to view the matching YARA rules. Create a free account
An error has occurred. This application may no longer respond until reloaded. Reload 🗙