Suspicious
Suspect

d57c73996b66432c378887113957f820

ZIP Archive
MD5: d57c73996b66432c378887113957f820
Size: 487.65 KB
application/zip

This sample is a 476.2 KB ZIP Archive for which Malva.RE's static analysis did not establish a malicious verdict. Static analysis extracted 4 embedded or derived files. It matches 2 YARA rules. The file was analysed statically: it was parsed and decompiled, never executed.

SHA256
89327024ee6c8a0d56f9297da4ba2fb66b5b61cf5c6c1af2b668a29ee2ea5fcc
MD5
d57c73996b66432c378887113957f820
Verdict
Inconclusive
File type
ZIP Archive · 476.2 KB

Cite this report: https://app.malva.re/sha256/89327024ee6c8a0d56f9297da4ba2fb66b5b61cf5c6c1af2b668a29ee2ea5fcc

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential

File
Type
ZIP archive
Size
487.65 KB · 487,650 B
First seen
2026-10-21 14:16 · 7 days ago
Last seen
2026-10-21 14:16 · 7 days ago
Last analysis
2026-10-21 14:16 · 7 days ago
Hashes
MD5 d57c73996b66432c378887113957f820 Sha1 5a74b00dfc988543b9212c7e72c23591889ac745 Sha256 89327024ee6c8a0d56f9297da4ba2fb66b5b61cf5c6c1af2b668a29ee2ea5fcc Sha384 bbde2f1472f8d1b63b308850b0f884601afed07af33dbfaf911e8ccbbb6c04796a2204bdee234e5655f729687b4684ed Sha512 8b3c99dfccce99b83e5824c78232512469c63093cf8551bd8e594f08087669f6c78a48c824bb2d0771f2edb0bbeb8bc41395b90f2b21a6f9d35df8b47c41c3c7 SSDeep 12288:Z4lhhLoVDI2FLmMJKMCCH1oHF9nJ/qJEk5LchPNNtR:GxopIAmMJ3H1ELnQF+hPNNtR TLSH BDA423F366B0D54717685FB9CB66CF73129FA644321C83208E98DA89D84D32EB7D842D

5 files
ZIPd57c73996b66432c378887113957f820
BATApp.bat
TXTicon16.txt
DLLlua51.dll
Structure
EXEresolver.exe
Structure
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

Structural branches: 3 STICH kept: 2secondary ignored: 1
bin 1

Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
Path arc:zip>pe:dll
Shape arc:zip>pe:dll
2 nodes
Path arc:zip>pe:exe
Shape arc:zip>pe:exe
2 nodes

5 files
ZIPd57c73996b66432c378887113957f820
BATApp.bat
TXTicon16.txt
No malware configuration was found at this point.
Sign in or create a free account to view the matching YARA rules. Create a free account
An error has occurred. This application may no longer respond until reloaded. Reload 🗙