Suspicious
Suspect

650ca1974619ffc540fc107bf298feaf

ZIP Archive
MD5: 650ca1974619ffc540fc107bf298feaf
Size: 1.57 MB
application/zip

This sample is a 1.5 MB ZIP Archive for which Malva.RE's static analysis did not establish a malicious verdict. Static analysis extracted 35 embedded or derived files. The file was analysed statically: it was parsed and decompiled, never executed.

SHA256
a80369d59765adf23bad3b6b18e7f3c87e528e69581ff68cb4b575e8fe00e48b
MD5
650ca1974619ffc540fc107bf298feaf
Verdict
Inconclusive
File type
ZIP Archive · 1.5 MB

Cite this report: https://app.malva.re/sha256/a80369d59765adf23bad3b6b18e7f3c87e528e69581ff68cb4b575e8fe00e48b

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential

File
Type
ZIP archive
Size
1.57 MB · 1,566,685 B
First seen
2026-10-05 21:30 · 24 days ago
Last seen
2026-10-05 21:30 · 24 days ago
Last analysis
2026-10-05 21:30 · 24 days ago
Hashes
MD5 650ca1974619ffc540fc107bf298feaf Sha1 89245d0c5ef41af783ec76b661616842148094a9 Sha256 a80369d59765adf23bad3b6b18e7f3c87e528e69581ff68cb4b575e8fe00e48b Sha384 fe724bc628466a1d5672fe250f390052156a77812c2f6789610c9f8f1686eba789fc68bf9b993600224c3cfb2712678f Sha512 e149ca492642878837af1199ede6d3de9dcc3521ed174165e4099ec850c5170645346e91580f07694f65c72b730f0ebdf2d9fc663aefc415f309285b8b779d0f SSDeep 24576:K8ko7NsSDeiApAiF9UEOYlmgyzRdrtmKR0czPVmaf6JXgYdxWTq5zfPPn3RDQ8WK:z1ySCiApAU9ZcLtvR0EkaiJxdMO9P3D TLSH 18753307556CA853FCB242B48B8D63EEC6C5700A0ED49A6B4D794631CD4FFD84A3C9BA

36 files
ZIP650ca1974619ffc540fc107bf298feaf
BINLICENSE_toggle-sprint-display
BINMETA-INF
MFMANIFEST.MF
BINjars
ZIPgithub-mixin-loader-2.5.2-obfuscated.jar
BINMETA-INF
MFMANIFEST.MF
BINiywceba
BINsay3
BINuwgxdrw8hu
BIN$$0.class
BINo.class
BINoiO.class
BINj.class
BINj_O.class
BINiI$.class
BINbw8hu85v
BINdfahycjbg
BINxdssct
BINd
BINd5982d951.class
BINd824d5a7b.class
BINd56e8382c.class
BINd22ac63db.class
BINdce531460.class
BINdc9d8806.class
BINdee45458e.class
BINdf36a2ca3.class
BINd3137a457.class
BINd16be295a.class
BINd54de3be3.class
BINd12a3965.class
BINVM.class
BINVM$MemberRef.class
BINGuard.class
BINintegrity.bin
BINvault.bin
JSONfabric.mod.json
BINassets
BINtoggle-sprint-display
IMGicon.png
IMGicon.png-preview.png
BINlang
JSONen_us.json
BINcom
BINaeltumn
BINtogglesprintdisplay
BINmixin
BINGuiMixin.class
JSONfabric.mod.json
JSONtoggle-sprint-display-refmap.json
JSONtoggle-sprint-display.mixins.json
STICH beta

No STICH Path has been generated for this analysis yet.

3 structural branches were classified as secondary (decorative or non-determinant content) and did not produce a fingerprint.

bin 2img 1

36 files
ZIP650ca1974619ffc540fc107bf298feaf
BINLICENSE_toggle-sprint-display
JSONfabric.mod.json
JSONtoggle-sprint-display-refmap.json
JSONtoggle-sprint-display.mixins.json
No malware configuration was found at this point.
Sign in or create a free account to view the matching YARA rules. Create a free account
An error has occurred. This application may no longer respond until reloaded. Reload 🗙