Suspicious
Suspect

9916fa2376740a498a842ad354616f9b

Share on LinkedIn
Print
ZIP Archive
MD5: 9916fa2376740a498a842ad354616f9b
Size: 2.82 MB
application/zip

This sample is a 2.7 MB ZIP Archive for which Malva.RE's static analysis did not establish a malicious verdict. Static analysis extracted 78 embedded or derived files. It matches 1 YARA rule. The file was analysed statically: it was parsed and decompiled, never executed.

SHA256
f452b1a06c86c4ffa7ae32359cd2c03e58f6f20c7f892c4819c85836085804ae
MD5
9916fa2376740a498a842ad354616f9b
Verdict
Inconclusive
File type
ZIP Archive · 2.7 MB

Cite this report: https://app.malva.re/sha256/f452b1a06c86c4ffa7ae32359cd2c03e58f6f20c7f892c4819c85836085804ae

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential

File
Type
ZIP archive
Size
2.82 MB · 2,819,462 B
First seen
2026-10-26 18:30 · 10 hours ago
Last seen
2026-10-26 18:30 · 10 hours ago
Last analysis
2026-10-26 18:30 · 10 hours ago
Hashes
MD5 9916fa2376740a498a842ad354616f9b Sha1 77906717b2de97be7074c2f3a9323fd625c497e1 Sha256 f452b1a06c86c4ffa7ae32359cd2c03e58f6f20c7f892c4819c85836085804ae Sha384 f1d6f3ce7a21e7f2250b5a26588a0432b274a644f9f610b2bbe01b849f427c79ccc7e44b5982013d854eb22f5b29bb85 Sha512 91be0826e77b6327318cbf1934b2e2ce5ced3eabb9f7dbcee43a2d23799afccbb250025e78543291b095d386fd1f3e30aeabdc37833275b4fa1aec0913c273cf SSDeep 49152:wU8C6HHyA/JvPKeQhx6jfbZ/J7/LFLlJT9AJd6Jxs0S:h2hNRYxMfXL9Ty6vs0S TLSH A5D533185DB968F0931B3C5A2FB11A4F81C3C1B23A98FBB8B29CD3095D34F66519674E

79 files
ZIP9916fa2376740a498a842ad354616f9b
DATconf.dat
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

Structural branches: 4 STICH kept: 1secondary ignored: 3
bin 3

Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
Path arc:zip>pe:dll
Shape arc:zip>pe:dll
2 nodes

An error has occurred. This application may no longer respond until reloaded. Reload 🗙