Suspicious
Suspect

d6690d957a86036b1b723758f38b3bd9

ZIP Archive
MD5: d6690d957a86036b1b723758f38b3bd9
Size: 133.93 KB
application/zip

This sample is a 130.8 KB ZIP Archive for which Malva.RE's static analysis did not establish a malicious verdict. Static analysis extracted 4 embedded or derived files. It matches 1 YARA rule. The file was analysed statically: it was parsed and decompiled, never executed.

SHA256
5334b3ffc7256b19783fd5f6049eec85970bdd2511fd9d5176282d5a15d1104d
MD5
d6690d957a86036b1b723758f38b3bd9
Verdict
Inconclusive
File type
ZIP Archive · 130.8 KB

Cite this report: https://app.malva.re/sha256/5334b3ffc7256b19783fd5f6049eec85970bdd2511fd9d5176282d5a15d1104d

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential

File
Type
ZIP archive
Size
133.93 KB · 133,928 B
Hashes
MD5 d6690d957a86036b1b723758f38b3bd9 Sha1 b7e09e42cc33fcc18f85d497c8da281347159a5e Sha256 5334b3ffc7256b19783fd5f6049eec85970bdd2511fd9d5176282d5a15d1104d Sha384 09ad0ed9cc8a7124a356195e6df279b665d50b26f064f9398df9586b8ed2d2b94da8937434438b42868232c0bf7a002c Sha512 ff51c59af26f96fcd68d6eef5ac4e071410e6e04bb37b28e8f1587582f5763876954f57024915e37ec5a7031f41c8b699ab46e80edda2bd3f957f8b947e6cef5 SSDeep 3072:uD8TpWkoVEBpBkIG48h7zJbMWAHaCKUkkC8l2Vlj0LqelKb:A8TpxppBkI6zJbMWBPUltclOYb TLSH 87D312A90FF217019C59EA46C34737AB7F93C7B053E67C4610CA62CE834C84F9E96698

5 files
ZIPd6690d957a86036b1b723758f38b3bd9
EXEPetya.A.exe
Structure
BINResources
BINRT_ICON
BINID:0001
BINID:1033
BINRT_GROUP_CURSOR4
BINID:0064
BINID:1033
BINRT_MANIFEST
BINID:0001
BINID:1033
STICH beta

No STICH Path has been generated for this analysis yet.

1 structural branch were classified as secondary (decorative or non-determinant content) and did not produce a fingerprint.

bin 1

5 files
ZIPd6690d957a86036b1b723758f38b3bd9
No malware configuration was found at this point.
Sign in or create a free account to view the matching YARA rules. Create a free account
An error has occurred. This application may no longer respond until reloaded. Reload 🗙