Suspicious
Suspect

c59a4210eeec3e61452f781d1ebf8856

Share on LinkedIn
Print
ZIP Archive
MD5: c59a4210eeec3e61452f781d1ebf8856
Size: 578.95 KB
application/zip

This sample is a 565.4 KB ZIP Archive for which Malva.RE's static analysis did not establish a malicious verdict. Static analysis extracted 3 embedded or derived files. It matches 2 YARA rules. The file was analysed statically: it was parsed and decompiled, never executed.

SHA256
afb24a115070e856f2a4c951cb30914c53cb80ae2febbf3db3f3833cf25bad36
MD5
c59a4210eeec3e61452f781d1ebf8856
Verdict
Inconclusive
File type
ZIP Archive · 565.4 KB

Cite this report: https://app.malva.re/sha256/afb24a115070e856f2a4c951cb30914c53cb80ae2febbf3db3f3833cf25bad36

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential

File
Type
ZIP archive
Size
578.95 KB · 578,949 B
First seen
2026-10-21 14:16 · 8 days ago
Last seen
2026-10-21 14:16 · 8 days ago
Last analysis
2026-10-21 14:16 · 8 days ago
Hashes
MD5 c59a4210eeec3e61452f781d1ebf8856 Sha1 8f8d421e1685c6e17aae8115f6689c9a6ccee42d Sha256 afb24a115070e856f2a4c951cb30914c53cb80ae2febbf3db3f3833cf25bad36 Sha384 f15f0f1158664c5feaa08d8973aa53026e0999a543bf370452a549024a4e1c0ebbf82737a1eb00c288fcbf4b6cdcd7f5 Sha512 bd68ef137ffcc0269a1f58d3dfd0f71a4782ab94b302a9f1d7aa43c08823bd366b6ba7e9ecfb6723a94d0712178b71a4e84a367c242a05ae47fc8d94170af28f SSDeep 12288:lqwEDcCCXf6wlOMWROC/FTeHo22Qm7NzofOr/mShR:SgCCX4MQOC/gHozN7NzomLmm TLSH E6C423443901C1DD874A6F3EADD45EB46E7D80E79A5A790027CEBD827C85AB033C9D2B

4 files
ZIPc59a4210eeec3e61452f781d1ebf8856
BATApp.bat
LOGbuff.log
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

Structural branches: 2 STICH kept: 1secondary ignored: 1
bin 1

Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
Path arc:zip>pe:exe
Shape arc:zip>pe:exe
2 nodes

An error has occurred. This application may no longer respond until reloaded. Reload 🗙