Suspicious
Suspect

9b12193eafd58af055f425227fa1977d

Share on LinkedIn
Print
ZIP Archive
MD5: 9b12193eafd58af055f425227fa1977d
Size: 453.07 KB
application/zip

This sample is a 442.5 KB ZIP Archive for which Malva.RE's static analysis did not establish a malicious verdict. Static analysis extracted 15 embedded or derived files. It matches 1 YARA rule. The file was analysed statically: it was parsed and decompiled, never executed.

SHA256
2e2612d964aaf92e7b57bccab58349518bcdfd3a3f07e1c70a71f4f6f6fef16c
MD5
9b12193eafd58af055f425227fa1977d
Verdict
Inconclusive
File type
ZIP Archive · 442.5 KB

Cite this report: https://app.malva.re/sha256/2e2612d964aaf92e7b57bccab58349518bcdfd3a3f07e1c70a71f4f6f6fef16c

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential

File
Type
ZIP archive
Size
453.07 KB · 453,070 B
First seen
2026-10-24 19:30 · 8 days ago
Last seen
2026-10-24 19:30 · 8 days ago
Last analysis
2026-10-24 19:30 · 8 days ago
Hashes
MD5 9b12193eafd58af055f425227fa1977d Sha1 eb778efaa71bdc1ed56a11550122f81cdfa32e93 Sha256 2e2612d964aaf92e7b57bccab58349518bcdfd3a3f07e1c70a71f4f6f6fef16c Sha384 a9c4502ede05e81b306c23177b106b777d3d33c3560524319453576db70c839bb0ccffc276a223c6917c36f0a5c98a7c Sha512 87e63453aecc0d2bed495ae010c1ccef844fdaeb50cbee8d24c0bf9c96d63c1f3ff4fc9407e477959eb9ecf8af7e67bd48d6faf1781db6f4bcb243affab787dd SSDeep 12288:RsMqHLqc9WtzeoZKNBDS5yHZI9aw828Ik:RsVHOcEtz5gNBDOy53w8Qk TLSH 05A4231C47EC90AE3E1EF8F07BE8C550E4DB5A1563D142A06401A79EBBDF6A25BDC324

16 files
ZIP9b12193eafd58af055f425227fa1977d
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

Structural branches: 3 STICH kept: 1secondary ignored: 2
bin 1img 1

Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
Path arc:zip>lnk
Shape arc:zip>lnk
2 nodes

An error has occurred. This application may no longer respond until reloaded. Reload 🗙