Suspicious
Suspect

d1b50fab13b9f816c77b3f42a55b70e1

GZIP Archive
MD5: d1b50fab13b9f816c77b3f42a55b70e1
Size: 2.79 MB
application/gzip

This sample is a 2.7 MB GZIP Archive for which Malva.RE's static analysis did not establish a malicious verdict. Static analysis extracted 12 embedded or derived files. The file was analysed statically: it was parsed and decompiled, never executed.

SHA256
842ab7ab49181415c8beb089851cce560ae6162149eaa6622d46123e55e69857
MD5
d1b50fab13b9f816c77b3f42a55b70e1
Verdict
Inconclusive
File type
GZIP Archive · 2.7 MB

Cite this report: https://app.malva.re/sha256/842ab7ab49181415c8beb089851cce560ae6162149eaa6622d46123e55e69857

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential

File
Type
GZIP archive
Size
2.79 MB · 2,794,474 B
First seen
2026-09-02 23:00 · one month ago
Last seen
2026-09-02 23:00 · one month ago
Last analysis
2026-09-02 23:00 · one month ago
Hashes
MD5 d1b50fab13b9f816c77b3f42a55b70e1 Sha1 cacf723c0cac0dd9d423c4e311a43d57e28d1adb Sha256 842ab7ab49181415c8beb089851cce560ae6162149eaa6622d46123e55e69857 Sha384 90bb305c354ad969c6d341849d2ac5646927a34afab7b9d82cdd43c89ce4436bf1f2e2f0ecf0cc89a8e2eb4c0ccd37fd Sha512 24d88a2edd56fb934506e8a3c1c14dac2c5e36ab2e96d3647c47fa4844bff6009a79dd6a6fa293ef275fcdc334aad66a8677f8c63f9ebc04fa58deaa59d2c41e SSDeep 49152:Up55rdin5e/zS6/5e8gOGFWHDxun7BTmeD7UnJdDFwWJ2OD7DbkjvIxn1/45:kB05iz7/DPGFWHFunZXonXDFBPjkMxa5 TLSH 85D533739A77EF6249916161B81719D8E0E3F52111C339B64F408CBCE3E4A69E68F3E4

13 files
GZd1b50fab13b9f816c77b3f42a55b70e1
TARfile_0.bin
BINupdated
BINd41d8cd98f00b204e9800998ecf8427e
BINconfig.json1
BINz
BINx
BINcnrun.service
JSONconfig.json
ELFsh
ELFh64
BINa
BINconfig.json2
BINrun
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

Structural branches: 2 STICH kept: 1secondary ignored: 1
bin 1

Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
Path arc:gz>arc:tar>elf
Shape arc:gz>arc:tar>elf
3 nodes

13 files
GZd1b50fab13b9f816c77b3f42a55b70e1
No malware configuration was found at this point.
Sign in or create a free account to view the matching YARA rules. Create a free account
An error has occurred. This application may no longer respond until reloaded. Reload 🗙