Malicious
79949a8baa1e0ab0e5f3c42c3abb1b4a
ZIP Archive
MD5: 79949a8baa1e0ab0e5f3c42c3abb1b4a
Size: 3.82 MB
application/zip
Ctrl + scroll to zoom · drag to pan
This sample is a 3.6 MB ZIP Archive classified as malicious by Malva.RE. Static analysis extracted 12 embedded or derived files. It matches 1 YARA rule. The file was analysed statically: it was parsed and decompiled, never executed.
- SHA256
- ab5d1a42babf7a6ff6ea6bf2f661fe419ed3c6b59ba59097a0dcd31f2798b577
- MD5
- 79949a8baa1e0ab0e5f3c42c3abb1b4a
- Verdict
- Malicious
- File type
- ZIP Archive · 3.6 MB
Cite this report: https://app.malva.re/sha256/ab5d1a42babf7a6ff6ea6bf2f661fe419ed3c6b59ba59097a0dcd31f2798b577
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
ZIP archive
Size
3.82 MB · 3,816,200 B
First seen
2026-07-04 10:01 · 3 months ago
Last seen
2026-07-04 10:01 · 3 months ago
Last analysis
2026-07-05 08:58 · 3 months ago
Hashes
MD5
79949a8baa1e0ab0e5f3c42c3abb1b4a
Sha1
ccbd7c63f2ad4e6ff8c501d2d6e7516adb51beb6
Sha256
ab5d1a42babf7a6ff6ea6bf2f661fe419ed3c6b59ba59097a0dcd31f2798b577
Sha384
a66e09107f75c86a73741bf93a00fbe23f6e8e22889d7112a9fc46a971cd08dc669ceac9730e51e86a179e60970380ac
Sha512
f3da7d9e9a21a31edfe03c55cd408a3c0ecba3f3bb7dc0d68103f9b91a66b02901c6ec17e83e32bac949f18dafc4249df5592a07295e37d10a8eb0a1fd563de2
SSDeep
24576:tpOIyKKFnlLIv9q6AopNHIdzmsJZVOKqIBc3YSFkqfk:tHpiN2qRkoasJZVOKXy3Fu
TLSH
B406DFCE557299F497FE6241A6350B2787B143D05C828981A2FC4B343E26F9768C9E3F
2 malicious · 13 files
ZIP79949a8baa1e0ab0e5f3c42c3abb1b4aCVE-2019-9674
EXEcStartexH.exe
Structure
P7B[Authenticode]_464eaf24.p7b
BINOverlay_306be45f.bin
BINResources
BINRT_ICON
BINID:0001
IMGID:0
IMGID:0-preview.png
BINID:0002
IMGID:0
IMGID:0-preview.png
BINID:0003
IMGID:0
IMGID:0-preview.png
BINID:0004
IMGID:0
IMGID:0-preview.png
BINRT_GROUP_CURSOR4
BINID:0000
BINID:0
2 malicious · 13 files
ZIP79949a8baa1e0ab0e5f3c42c3abb1b4aCVE-2019-9674
EXEcStartexH.exe
Structure
P7B[Authenticode]_464eaf24.p7b
BINOverlay_306be45f.bin
BINResources
No malware configuration was found at this point.
Sign in or create a free account to view the matching YARA rules.
Create a free account