Sign up free
Suspicious
Suspect

85efeb4a41be758b41e896a6367ce26c

Share on LinkedIn
Print
ZIP Archive
MD5: 85efeb4a41be758b41e896a6367ce26c
Size: 587.57 KB
application/zip

This sample is a 573.8 KB ZIP Archive for which Malva.RE's static analysis did not establish a malicious verdict. Static analysis extracted 3 embedded or derived files. It matches 1 YARA rule. The file was analysed statically: it was parsed and decompiled, never executed.

SHA256
732616bed15927af3a5b466174b10559e2fdcc8da13d489d0a5a559e724988ec
MD5
85efeb4a41be758b41e896a6367ce26c
Verdict
Inconclusive
File type
ZIP Archive · 573.8 KB

Cite this report: https://app.malva.re/sha256/732616bed15927af3a5b466174b10559e2fdcc8da13d489d0a5a559e724988ec

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential

File
Type
ZIP archive
Size
587.57 KB · 587,570 B
First seen
2026-10-21 14:01 · 12 days ago
Last seen
2026-10-21 14:01 · 12 days ago
Last analysis
2026-10-21 14:01 · 12 days ago
Hashes
MD5 85efeb4a41be758b41e896a6367ce26c Sha1 d18ed35b77518c18acf62c12ed66f35b1c15388c Sha256 732616bed15927af3a5b466174b10559e2fdcc8da13d489d0a5a559e724988ec Sha384 638acac69b2daa35f223f4a7f399fddb86e0eebc025ecd2e52469a15a4e141e07643388fd52e24263edad7a104270a7c Sha512 1a45a662d861b19efc24ac8cba5dd0209b827d12ac988b206e28140a8141a9013a752a9b86d21fa89968d3481938f91850e80408a4349fc791931d61d35344c7 SSDeep 12288:5MU+0xq75aS9iYIp6cP/G2Bku8stNvC28c5/VTUPkYyt:9+J71vI/GSYc5/pN TLSH 30C4235D7018EB38E907A174F312C0F26BAE662BE0A5C39CD045053B37AFF26689D957

4 files
ZIP85efeb4a41be758b41e896a6367ce26c
CMDApplication.cmd
TXTstatic.txt
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

Structural branches: 2 STICH kept: 1secondary ignored: 1
bin 1

Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
Path arc:zip>pe:exe
Shape arc:zip>pe:exe
2 nodes

An error has occurred. This application may no longer respond until reloaded. Reload 🗙