Suspicious
Suspect

af776696efe2f634a93a1205769bdd53

Share on LinkedIn
Print
ZIP Archive
MD5: af776696efe2f634a93a1205769bdd53
Size: 493.75 KB
application/zip

This sample is a 482.2 KB ZIP Archive for which Malva.RE's static analysis did not establish a malicious verdict. Static analysis extracted 4 embedded or derived files. It matches 2 YARA rules. The file was analysed statically: it was parsed and decompiled, never executed.

SHA256
ba8fec0f04cf03e098085c5c69a3aa531148dafe9a186657d96918db091883cd
MD5
af776696efe2f634a93a1205769bdd53
Verdict
Inconclusive
File type
ZIP Archive · 482.2 KB

Cite this report: https://app.malva.re/sha256/ba8fec0f04cf03e098085c5c69a3aa531148dafe9a186657d96918db091883cd

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential

File
Type
ZIP archive
Size
493.75 KB · 493,748 B
First seen
2026-10-21 14:01 · 5 days ago
Last seen
2026-10-21 14:01 · 5 days ago
Last analysis
2026-10-21 14:02 · 5 days ago
Hashes
MD5 af776696efe2f634a93a1205769bdd53 Sha1 a23c8a25d81024390e42fa1e48bc7bbed44ae6ab Sha256 ba8fec0f04cf03e098085c5c69a3aa531148dafe9a186657d96918db091883cd Sha384 56591994c202454faef67378b0547665feb7ef989df4cf14fdc5b7be485a5274ca3b8ae4e29e90c9e9a04108d827bc86 Sha512 77148f2a6fb1e26e160881a8edb7cea77450893a05ae0d38be7c7a9014829f5dc8d8408e959cc09366df05c280ef2be36b8157edd2e0dd1ba03d7eacd74fbbf3 SSDeep 12288:hkmht7DrvdyiVCCH1oHF9nJ/qjuyqgoJrrzTPwkH:hkmHzMqH1ELnKqgoJnnj TLSH CDB423F193429E0B23A4DAB457A3DB3375CE7292769D9311CA06CA9F4C7072886DC16F

5 files
ZIPaf776696efe2f634a93a1205769bdd53
TXTasm.txt
BATStartApp.bat
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

Structural branches: 3 STICH kept: 2secondary ignored: 1
bin 1

Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
Path arc:zip>pe:dll
Shape arc:zip>pe:dll
2 nodes
Path arc:zip>pe:exe
Shape arc:zip>pe:exe
2 nodes

An error has occurred. This application may no longer respond until reloaded. Reload 🗙