Suspicious
Suspect

cebabe31730c6d20e25f3455de1d6faa

ZIP Archive
MD5: cebabe31730c6d20e25f3455de1d6faa
Size: 542.16 KB
application/zip

This sample is a 529.5 KB ZIP Archive for which Malva.RE's static analysis did not establish a malicious verdict. Static analysis extracted 3 embedded or derived files. It matches 1 YARA rule. The file was analysed statically: it was parsed and decompiled, never executed.

SHA256
7552896479a3a7c0cae0c77f809a46ee6c900b5a04ddccce2cfa0056a775a99a
MD5
cebabe31730c6d20e25f3455de1d6faa
Verdict
Inconclusive
File type
ZIP Archive · 529.5 KB

Cite this report: https://app.malva.re/sha256/7552896479a3a7c0cae0c77f809a46ee6c900b5a04ddccce2cfa0056a775a99a

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential

File
Type
ZIP archive
Size
542.16 KB · 542,164 B
First seen
2026-10-21 14:16 · 6 days ago
Last seen
2026-10-21 14:16 · 6 days ago
Last analysis
2026-10-21 14:16 · 6 days ago
Hashes
MD5 cebabe31730c6d20e25f3455de1d6faa Sha1 2e294f50a7bb8e5cae00931d5fcd00e25d8b0949 Sha256 7552896479a3a7c0cae0c77f809a46ee6c900b5a04ddccce2cfa0056a775a99a Sha384 38cf2e34cebdfccd78e9d0bda8f0c1b1d9c5c4400385edcc8012d9e300492b874c87de964ce70bd9725a8366f9638dcd Sha512 f70b0ff5570425772b055acfd5bd9bd8118b2cd267bea3b68e48f4a455bde21edfe1f75f5fad92142e37b8f15683ae0e7f57be96060769e6ca98552d68b77521 SSDeep 12288:I7JZAaFpe7qO3g/ALyYG0ZaDajTCXMO8xzDOe3Wc:ULpefA/f0Za6TCXKBxmc TLSH E5B42369227F71900C7543A94B468124FC3E5EB2AE00DD93EDDCAB4D8F5BB195638E0E

4 files
ZIPcebabe31730c6d20e25f3455de1d6faa
TXTbytecode.txt
EXEgcm.exe
Structure
CMDLauncher.cmd
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

Structural branches: 2 STICH kept: 1secondary ignored: 1
bin 1

Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
Path arc:zip>pe:exe
Shape arc:zip>pe:exe
2 nodes

4 files
ZIPcebabe31730c6d20e25f3455de1d6faa
TXTbytecode.txt
CMDLauncher.cmd
No malware configuration was found at this point.
Sign in or create a free account to view the matching YARA rules. Create a free account
An error has occurred. This application may no longer respond until reloaded. Reload 🗙