Suspicious
Suspect

861983acad9bcb13edb53f0a4057b553

ZIP Archive
MD5: 861983acad9bcb13edb53f0a4057b553
Size: 1.58 MB
application/zip

This sample is a 1.5 MB ZIP Archive for which Malva.RE's static analysis did not establish a malicious verdict. Static analysis extracted 45 embedded or derived files. The file was analysed statically: it was parsed and decompiled, never executed.

SHA256
c0b4d383c4225e4142c1d738044dc1c1f42854727bb89dbaf32aff0cedcd488a
MD5
861983acad9bcb13edb53f0a4057b553
Verdict
Inconclusive
File type
ZIP Archive · 1.5 MB

Cite this report: https://app.malva.re/sha256/c0b4d383c4225e4142c1d738044dc1c1f42854727bb89dbaf32aff0cedcd488a

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential

File
Type
ZIP archive
Size
1.58 MB · 1,584,470 B
First seen
2026-10-05 20:30 · 27 days ago
Last seen
2026-10-05 20:30 · 27 days ago
Last analysis
2026-10-05 20:30 · 27 days ago
Hashes
MD5 861983acad9bcb13edb53f0a4057b553 Sha1 b179bd01b26cfa284a24c7696cd5361078d62871 Sha256 c0b4d383c4225e4142c1d738044dc1c1f42854727bb89dbaf32aff0cedcd488a Sha384 35fd14d51a4825aaf327a0443f402d1c96f084f2e7caee1b117638ad8abea3487242aa326d7c984889e0ebf06f14f032 Sha512 9e452c6a9fc6cd2808f3aab093158d903140625ff40fbd86f734b0f0548de58249b3e66640bbaa29c04e14e62e720b284d5d78957d6f8ec8e368518fc91fd7f9 SSDeep 24576:7t6bHKuDE64v0SFpMEAIBoESHxtphC+D0cVTNA4RUr1m0dJ4103zfPTl3/FkaWs6:7Gquo64v0kp7GJhLD02+4+rxdemjp36Z TLSH 18753302AD68A413FCB342748B9D63EACACE70160D849A6B5D755321CD5FFD80E3C5BA

46 files
ZIP861983acad9bcb13edb53f0a4057b553
BINLICENSE_toggle-sprint-display
BINMETA-INF
MFMANIFEST.MF
BINjars
ZIPgithub-mixin-loader-2.1.2-obfuscated.jar
BINMETA-INF
MFMANIFEST.MF
BINiywceba
BINsay3
BINuwgxdrw8hu
BIN$$0.class
BINo.class
BINoiO.class
BINj.class
BINj_O.class
BINiI$.class
BINbw8hu85v
BINdfahycjbg
BINxdssct
BINd
BINd5982d951.class
BINd824d5a7b.class
BINd56e8382c.class
BINd22ac63db.class
BINdce531460.class
BINdc9d8806.class
BINdee45458e.class
BINdf36a2ca3.class
BINd3137a457.class
BINd16be295a.class
BINd54de3be3.class
BINd12a3965.class
BINVM.class
BINVM$MemberRef.class
BINGuard.class
BINintegrity.bin
BINvault.bin
JSONfabric.mod.json
BINassets
BINtoggle-sprint-display
IMGicon.png
IMGicon.png-preview.png
BINlang
JSONen_us.json
BINcom
BINaeltumn
BINtogglesprintdisplay
BINconfig
BINAnchor$1.class
BINAnchor$2.class
BINAnchor$3.class
BINAnchor$4.class
BINAnchor.class
BINSettingsScreen.class
BINSprintConfig.class
BINSprintOptions.class
BINVisualsType.class
BINintegration
BINModMenuIntegration.class
BINmixin
BINHudMixin$1.class
BINHudMixin.class
JSONfabric.mod.json
JSONtoggle-sprint-display.mixins.json
STICH beta

No STICH Path has been generated for this analysis yet.

3 structural branches were classified as secondary (decorative or non-determinant content) and did not produce a fingerprint.

bin 2img 1

46 files
ZIP861983acad9bcb13edb53f0a4057b553
BINLICENSE_toggle-sprint-display
JSONfabric.mod.json
JSONtoggle-sprint-display.mixins.json
No malware configuration was found at this point.
Sign in or create a free account to view the matching YARA rules. Create a free account
An error has occurred. This application may no longer respond until reloaded. Reload 🗙