Malicious
dc2f11905c77929a9b115bb02b3640fb
GZIP Archive
MD5: dc2f11905c77929a9b115bb02b3640fb
Size: 26.44 KB
application/gzip
Ctrl + scroll to zoom · drag to pan
This sample is a 25.8 KB GZIP Archive classified as malicious by Malva.RE. Static analysis extracted 1 embedded or derived file. It matches 1 YARA rule. Observed behaviours map to MITRE ATT&CK T1059.007. The file was analysed statically: it was parsed and decompiled, never executed.
- SHA256
- 8d7fae9ec5139cb7a184710ac445ebf16aeca23fd38c33eae63a2ff351570fd4
- MD5
- dc2f11905c77929a9b115bb02b3640fb
- Verdict
- Malicious
- File type
- GZIP Archive · 25.8 KB
- MITRE ATT&CK
- T1059.007
Cite this report: https://app.malva.re/sha256/8d7fae9ec5139cb7a184710ac445ebf16aeca23fd38c33eae63a2ff351570fd4
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
GZIP archive
Size
26.44 KB · 26,435 B
First seen
2026-10-29 05:00 · an hour ago
Last seen
2026-10-29 05:00 · an hour ago
Last analysis
2026-10-29 05:00 · an hour ago
Hashes
MD5
dc2f11905c77929a9b115bb02b3640fb
Sha1
56271690e079ce130ba96a067975662a3fb94664
Sha256
8d7fae9ec5139cb7a184710ac445ebf16aeca23fd38c33eae63a2ff351570fd4
Sha384
1244fb5cdc5542d3581b4c0355dca5ab1149b90f08fdb8d67034e33516772c38446802de09b5c0f724dfebbd01f48977
Sha512
0cbe3b3f6ce5e4a254a0919cddeffec69345fcd9a806423de1addbcbe18c207b20fad77ce409496b633bbb911fe6902515b20bbeb82f9af0603bc76faa69c1cf
SSDeep
768:Nok3zaaf4vy+zbesbY/W+Yh7UV/GpqDa18XP:tjaaf46AeEY+lZUNG/8XP
TLSH
FFC2E17DB21CCBEE2A6A5D0A0797BF09E52149F0BDD636111768D9A9909CCB3CC02E4C
2 malicious · 2 files
GZdc2f11905c77929a9b115bb02b3640fbT1059.007
JS05002600357104880_KAWAN_LAMA_GROUP_PT.jsT1059.007
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
arc:gz>scr:js~T1059.007
Shape
arc:gz>scr:js
technique2 nodes
Trace d'emulation JS (ordonnee)
UNKNWOWNmalicious
#? nehuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential2 malicious · 2 files
GZdc2f11905c77929a9b115bb02b3640fbT1059.007
JS05002600357104880_KAWAN_LAMA_GROUP_PT.jsT1059.007
No malware configuration was found at this point.
Trace d'emulation JS (ordonnee)
UNKNWOWNmalicious
#? nehuhuhuhuhuhuhuhuhuhuhu
dc2f11905c77929a9b115bb02b3640fb › 05002600357104880_KAWAN_LAMA_GROUP_PT.js
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with EssentialSign in or create a free account to view the matching YARA rules.
Create a free account