Suspicious
Suspect

c7df7e956d47fadcfd213d4df4f8dbc9

ZIP Archive
MD5: c7df7e956d47fadcfd213d4df4f8dbc9
Size: 584.58 KB
application/zip

This sample is a 570.9 KB ZIP Archive for which Malva.RE's static analysis did not establish a malicious verdict. Static analysis extracted 3 embedded or derived files. It matches 1 YARA rule. The file was analysed statically: it was parsed and decompiled, never executed.

SHA256
577f8fd9b0683824ceabd42983962bbf96967b0272afcccd17b1aee870acb4d9
MD5
c7df7e956d47fadcfd213d4df4f8dbc9
Verdict
Inconclusive
File type
ZIP Archive · 570.9 KB

Cite this report: https://app.malva.re/sha256/577f8fd9b0683824ceabd42983962bbf96967b0272afcccd17b1aee870acb4d9

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential

File
Type
ZIP archive
Size
584.58 KB · 584,580 B
First seen
2026-10-06 07:30 · 23 days ago
Last seen
2026-10-06 07:30 · 23 days ago
Last analysis
2026-10-06 07:30 · 23 days ago
Hashes
MD5 c7df7e956d47fadcfd213d4df4f8dbc9 Sha1 2525f5db44f88ce3bf2b6f8e88497ce3c93b0d00 Sha256 577f8fd9b0683824ceabd42983962bbf96967b0272afcccd17b1aee870acb4d9 Sha384 65f2e8609b45c4dcbf3ac123c59b657d3a42500d2402329a31c0203d770290b4c44b635ad5242ccf8a187f32272d51d5 Sha512 5ac49dd0ce0a2130d7ff2bc0a00b5dffe15a41c8428e9554b35d45cbca08b212738347adbe04dedef1de66b4a3665dabaa82172d12b6f15d822c9d222b38610d SSDeep 12288:+A7iOm6Jjghf4xSfUxZ2U18/dtQlSprSp16nQAH9NNzpW4SFyorOIic/7MPp:xm6Jj6ESfUxZ91kmY/99z8VFXicTO TLSH D8C423792755F0C46206F2FC828CBCD886EF14F98B9315BAC90FA585F456257BB2218F

4 files
ZIPc7df7e956d47fadcfd213d4df4f8dbc9
CMDActivate.cmd
EXElua.exe
Structure
TXTpackage.txt
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

Structural branches: 2 STICH kept: 1secondary ignored: 1
bin 1

Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
Path arc:zip>pe:exe
Shape arc:zip>pe:exe
2 nodes

4 files
ZIPc7df7e956d47fadcfd213d4df4f8dbc9
CMDActivate.cmd
TXTpackage.txt
No malware configuration was found at this point.
Sign in or create a free account to view the matching YARA rules. Create a free account
An error has occurred. This application may no longer respond until reloaded. Reload 🗙