Sign up free
Suspicious
Suspect

Share on LinkedIn
Print
ZIP Archive
MD5:
Size: 0 B
application/zip

The file 875669d442760872cdaddc8cc9cc2c49 is a ZIP Archive. Malva.RE parsed it statically and found no known malware family, configuration or malicious signature. Static analysis extracted 1476 embedded or derived files. It matches 15 YARA rules. Static analysis cannot prove a file is harmless: an unknown or heavily packed threat can go undetected. The file was parsed and decompiled, never executed.

SHA256
—
MD5
-
Verdict
No known threat found
File type
ZIP Archive

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential

File
Type
ZIP archive

1477 files
ZIP875669d442760872cdaddc8cc9cc2c49
PYlnstaIer.py
EXElnstaIer.exe

PE Layout UNKNWOWNsuspect
Memoryhuhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #1 URIsuspect
https:huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #2 URIsuspect
https:huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #3 URIsuspect
http:/huhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential
An error has occurred. This application may no longer respond until reloaded. Reload 🗙