Malicious
Malicious

a11194e608665c0993500b2e91f370ef

ZIP Archive
MD5: a11194e608665c0993500b2e91f370ef
Size: 487.68 KB
application/zip
Ctrl + scroll to zoom · drag to pan

This sample is a 476.3 KB ZIP Archive classified as malicious by Malva.RE. Static analysis extracted 4 embedded or derived files. It matches 3 YARA rules. Observed behaviours map to MITRE ATT&CK T1027 and T1059.005. The file was analysed statically: it was parsed and decompiled, never executed.

SHA256
6595ac5d13cc264e88a84c85e7f5f8d1cd22af008299a412c03630abe1330a51
MD5
a11194e608665c0993500b2e91f370ef
Verdict
Malicious
File type
ZIP Archive · 476.3 KB
MITRE ATT&CK
T1027T1059.005

Cite this report: https://app.malva.re/sha256/6595ac5d13cc264e88a84c85e7f5f8d1cd22af008299a412c03630abe1330a51

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential

File
Type
ZIP archive
Size
487.68 KB · 487,683 B
First seen
2026-10-21 13:34 · 4 days ago
Last seen
2026-10-21 13:34 · 4 days ago
Last analysis
2026-10-21 13:40 · 4 days ago
Hashes
MD5 a11194e608665c0993500b2e91f370ef Sha1 70fb14d2bd46ad40d1d98cfe794a770c3ef757d3 Sha256 6595ac5d13cc264e88a84c85e7f5f8d1cd22af008299a412c03630abe1330a51 Sha384 72b90d96dd5d1094afc487a71e953477981803b614f6c75ba58f463797d6301027274805622020390446e77f9c964137 Sha512 16e31f9429625965d1bb7beaecbc96e7ec159506ff6cb63fc83c6a9ee81b2d32fe46467f89fe1dbd1b0f2c214090045a726d547f86bb5e7130ac5fbc8833d0f3 SSDeep 12288:ySCDe0U+m1V6ECbniSPfS3e2R3feeintFcksTsuC8hHa:yDe0wUTiSWzeeiYsP8da TLSH D5A42394C1B857962448E3F9017F19AE1F302CB6CA3DA78E941FD6E84B64B8CD3E6057

2 malicious · 5 files
ZIPa11194e608665c0993500b2e91f370ef
BATApplication.bat
EXEcli.exe
Structure
VBSskey.txt
VBSskey.txt.deobfuscated.vbs
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

Structural branches: 3 STICH kept: 2secondary ignored: 1
bin 1

Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
Path arc:zip>scr:vbs~T1027~T1059.005
Shape arc:zip>scr:vbs
technique2 nodes
Path arc:zip>pe:exe
Shape arc:zip>pe:exe
2 nodes

2 malicious · 5 files
ZIPa11194e608665c0993500b2e91f370ef
BATApplication.bat
VBSskey.txt
VBSskey.txt.deobfuscated.vbs
No malware configuration was found at this point.
Sign in or create a free account to view the matching YARA rules. Create a free account
An error has occurred. This application may no longer respond until reloaded. Reload 🗙