Suspicious
Suspect

af301adeafd5b65862911ca619dcfc6a

ZIP Archive
MD5: af301adeafd5b65862911ca619dcfc6a
Size: 493.75 KB
application/zip

This sample is a 482.2 KB ZIP Archive for which Malva.RE's static analysis did not establish a malicious verdict. Static analysis extracted 4 embedded or derived files. It matches 2 YARA rules. The file was analysed statically: it was parsed and decompiled, never executed.

SHA256
bc3ea475b71be22a54118d7816eda14e17687dbe900bb5c4cad3d19327c2b041
MD5
af301adeafd5b65862911ca619dcfc6a
Verdict
Inconclusive
File type
ZIP Archive · 482.2 KB

Cite this report: https://app.malva.re/sha256/bc3ea475b71be22a54118d7816eda14e17687dbe900bb5c4cad3d19327c2b041

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential

File
Type
ZIP archive
Size
493.75 KB · 493,748 B
First seen
2026-10-21 13:46 · 7 days ago
Last seen
2026-10-21 13:46 · 7 days ago
Last analysis
2026-10-21 13:47 · 7 days ago
Hashes
MD5 af301adeafd5b65862911ca619dcfc6a Sha1 7c016d229b90da50cd6ddb9fc5fefe0bf2b5fdba Sha256 bc3ea475b71be22a54118d7816eda14e17687dbe900bb5c4cad3d19327c2b041 Sha384 113ed02b37debf064b82b6011d315c3a8bd65faad703f587a6c086f5b3348f9d3ff532543ff61ab3a05de19d5c698250 Sha512 8b1f57a4b8da529b27beddb8d711b7f5a3ef3452a4d1fb90d249756cf09867800699baf3fe3bef1973acdf32ba2d0d182e06d81276eec529df3600dd14497d83 SSDeep 12288:Fkmht7DrvdyidCCH1oHF9nJ/qjuyygoJrrzTPwk/:FkmHzMuH1ELnKygoJnnD TLSH F9B423F193429E0B23A4DAB457A3DB3375CE7292769D9301CA06CA9F4C7072886DC16F

5 files
ZIPaf301adeafd5b65862911ca619dcfc6a
TXTasm.txt
DLLlua51.dll
Structure
EXEluau.exe
Structure
BATStartApp.bat
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

Structural branches: 3 STICH kept: 2secondary ignored: 1
bin 1

Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
Path arc:zip>pe:dll
Shape arc:zip>pe:dll
2 nodes
Path arc:zip>pe:exe
Shape arc:zip>pe:exe
2 nodes

5 files
ZIPaf301adeafd5b65862911ca619dcfc6a
TXTasm.txt
BATStartApp.bat
No malware configuration was found at this point.
Sign in or create a free account to view the matching YARA rules. Create a free account
An error has occurred. This application may no longer respond until reloaded. Reload 🗙