Suspicious
Suspect

e4025ca20f5439efbcf96cb7b38a8c24

ZIP Archive
MD5: e4025ca20f5439efbcf96cb7b38a8c24
Size: 192.24 KB
application/zip

This sample is a 187.7 KB ZIP Archive for which Malva.RE's static analysis did not establish a malicious verdict. Static analysis extracted 2 embedded or derived files. It matches 2 YARA rules. The file was analysed statically: it was parsed and decompiled, never executed.

SHA256
421a4ad4b0a8ac700f33745f7377a27ca6dc5e69031fe2cd6d16ce6d8ba5f498
MD5
e4025ca20f5439efbcf96cb7b38a8c24
Verdict
Inconclusive
File type
ZIP Archive · 187.7 KB

Cite this report: https://app.malva.re/sha256/421a4ad4b0a8ac700f33745f7377a27ca6dc5e69031fe2cd6d16ce6d8ba5f498

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential

File
Type
ZIP archive
Size
192.24 KB · 192,241 B
First seen
2026-10-28 11:00 · 8 hours ago
Last seen
2026-10-28 11:00 · 8 hours ago
Last analysis
2026-10-28 11:01 · 8 hours ago
Hashes
MD5 e4025ca20f5439efbcf96cb7b38a8c24 Sha1 6f9b09d5c9405fe8f6b3ad4290c589ad047f7a1a Sha256 421a4ad4b0a8ac700f33745f7377a27ca6dc5e69031fe2cd6d16ce6d8ba5f498 Sha384 4f7249b44842e4f8a84e7c0ccc391fee6437bb293d5afb01f345b91f31c621603b92880acdeb6745484ae4a39cbf18d7 Sha512 90718741d0fc7db8499652c3dea0efbc1b23a776ddef269b28bb46b0e8939b136dedb39620f527940e3f5b2fcfb980cc738d8f01ba61b3e1e7f1763cd2f23a67 SSDeep 3072:c19zWSyv+nFM/jemovJWnS4wAonYI5YaOK6DCW9XfOdij7hmFo7hOZK6AvxJlcwk:S9zekcZovJW+AlIICu5EFocEvvB5Q TLSH EC14125D7013783AD1CE050F5AD9B2E68B72EF2DDB0284414BCB91E0EDA6B486913DCE

3 files
ZIPe4025ca20f5439efbcf96cb7b38a8c24
EXEOrder_details_40353.pdf.exe
Structure
EXE[UPX unpacked Nrv2ELe32].exe
Structure
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
Path arc:zip>pe:exe
Shape arc:zip>pe:exe
2 nodes

3 files
ZIPe4025ca20f5439efbcf96cb7b38a8c24
No malware configuration was found at this point.
Sign in or create a free account to view the matching YARA rules. Create a free account
An error has occurred. This application may no longer respond until reloaded. Reload 🗙