Malicious
ZIP Archive
MD5: 9a2845e830b429e02f6a28471fc20866
Size: 27.13 KB
application/zip
Ctrl + scroll to zoom · drag to pan
This sample is a 26.5 KB ZIP Archive classified as malicious by Malva.RE. Static analysis extracted 1 embedded or derived file. It matches 1 YARA rule. Observed behaviours map to MITRE ATT&CK T1059.007. The file was analysed statically: it was parsed and decompiled, never executed.
- SHA256
- 8418b02b9651c0b26cd3366279e451f584889f419585c4284ffac63b27a0e987
- MD5
- 9a2845e830b429e02f6a28471fc20866
- Verdict
- Malicious
- File type
- ZIP Archive · 26.5 KB
- MITRE ATT&CK
- T1059.007
Cite this report: https://app.malva.re/sha256/8418b02b9651c0b26cd3366279e451f584889f419585c4284ffac63b27a0e987
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
ZIP archive
Size
27.13 KB · 27,128 B
First seen
2026-11-03 16:45 · an hour ago
Last seen
2026-11-03 16:45 · an hour ago
Last analysis
2026-11-03 16:45 · an hour ago
Hashes
MD5
9a2845e830b429e02f6a28471fc20866
Sha1
4cd751107095830e09cd4ad90238984628ff7d32
Sha256
8418b02b9651c0b26cd3366279e451f584889f419585c4284ffac63b27a0e987
Sha384
c1c951fae585ca07c3a8382c9b7941630d01567b1260acd2a3f895c2a27aa881860b2c0f9ec4d04d0265bc36f65d942a
Sha512
c7d2d7b7b69e82fdeb8ade83c0172c4b2dcfc25862183e229d91cc57a382674d2219ebcbcc5aa8539574ac1486ff1c6a8ca435642fcd94f62a8b173300f92e35
SSDeep
768:zuXhKwY4esNBPxCREpYRsqDeAEusN8FweqWpyXG:zFsNpbpYfDevyFeWpkG
TLSH
6CC2F16ABDD8D22235C5C1C5433DA20313A5A895D1E16CD322A6B1E4B86DFFC36C668B
2 malicious · 2 files
ZIP9a2845e830b429e02f6a28471fc20866T1059.007
JSVISTA_PREVIA_PROCESO_EJECUTIVO_SINGULAR_3674321.jsT1059.007
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
arc:zip>scr:js~T1059.007
Shape
arc:zip>scr:js
technique2 nodes
Trace d'emulation JS (ordonnee)
UNKNWOWNmalicious
#? nehuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential