Suspicious
Suspect

dc49af2c34fe7d602eb692790e18689c

ZIP Archive
MD5: dc49af2c34fe7d602eb692790e18689c
Size: 584.44 KB
application/zip

This sample is a 570.7 KB ZIP Archive for which Malva.RE's static analysis did not establish a malicious verdict. Static analysis extracted 3 embedded or derived files. It matches 1 YARA rule. The file was analysed statically: it was parsed and decompiled, never executed.

SHA256
1ff3f430a858b520771aff80e25409778109197d68e8b24f63100c30bef4d48b
MD5
dc49af2c34fe7d602eb692790e18689c
Verdict
Inconclusive
File type
ZIP Archive · 570.7 KB

Cite this report: https://app.malva.re/sha256/1ff3f430a858b520771aff80e25409778109197d68e8b24f63100c30bef4d48b

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential

File
Type
ZIP archive
Size
584.44 KB · 584,435 B
First seen
2026-10-06 08:46 · 25 days ago
Last seen
2026-10-06 08:46 · 25 days ago
Last analysis
2026-10-06 08:46 · 25 days ago
Hashes
MD5 dc49af2c34fe7d602eb692790e18689c Sha1 ccb9a3bff91812df13219612304448e3dc687e03 Sha256 1ff3f430a858b520771aff80e25409778109197d68e8b24f63100c30bef4d48b Sha384 244ccc6e081935dfc2f286f202b99b8b636e7426276cfd0effc26c257e7901bffe8a8fa986cf08218f8811d22820e634 Sha512 f2dbe16fb848d9003e6a45768ba01c2075b92dc5ed416966c8f8f80f0f1de9519adc81caf18d8bc774afee4b8f0a8161c625e47bd31e314e2e10ecb132cbf2be SSDeep 12288:IeElNtIBB2gX3U5VA7iOm6Jjghf4xSfUxZ2U18/dtQlSprSp16nQAH9N3ezM:IeSIBBfHTm6Jj6ESfUxZ91kmY/9Hew TLSH C4C423B7179AB4897503E3E4814C6D94C9AF20D957C3436ECA1E2693F5BE247FB2009E

4 files
ZIPdc49af2c34fe7d602eb692790e18689c
TXTgenlibbc.txt
EXEjava.exe
Structure
CMDLaunchApp.cmd
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

Structural branches: 2 STICH kept: 1secondary ignored: 1
bin 1

Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
Path arc:zip>pe:exe
Shape arc:zip>pe:exe
2 nodes

4 files
ZIPdc49af2c34fe7d602eb692790e18689c
TXTgenlibbc.txt
CMDLaunchApp.cmd
No malware configuration was found at this point.
Sign in or create a free account to view the matching YARA rules. Create a free account
An error has occurred. This application may no longer respond until reloaded. Reload 🗙