Suspect
ZIP Archive
MD5: e4025ca20f5439efbcf96cb7b38a8c24
Size: 192.24 KB
application/zip
This sample is a 187.7 KB ZIP Archive for which Malva.RE's static analysis did not establish a malicious verdict. Static analysis extracted 2 embedded or derived files. It matches 2 YARA rules. The file was analysed statically: it was parsed and decompiled, never executed.
- SHA256
- 421a4ad4b0a8ac700f33745f7377a27ca6dc5e69031fe2cd6d16ce6d8ba5f498
- MD5
- e4025ca20f5439efbcf96cb7b38a8c24
- Verdict
- Inconclusive
- File type
- ZIP Archive · 187.7 KB
Cite this report: https://app.malva.re/sha256/421a4ad4b0a8ac700f33745f7377a27ca6dc5e69031fe2cd6d16ce6d8ba5f498
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
ZIP archive
Size
192.24 KB · 192,241 B
First seen
2026-10-28 11:00 · 8 hours ago
Last seen
2026-10-28 11:00 · 8 hours ago
Last analysis
2026-10-28 11:01 · 8 hours ago
Hashes
MD5
e4025ca20f5439efbcf96cb7b38a8c24
Sha1
6f9b09d5c9405fe8f6b3ad4290c589ad047f7a1a
Sha256
421a4ad4b0a8ac700f33745f7377a27ca6dc5e69031fe2cd6d16ce6d8ba5f498
Sha384
4f7249b44842e4f8a84e7c0ccc391fee6437bb293d5afb01f345b91f31c621603b92880acdeb6745484ae4a39cbf18d7
Sha512
90718741d0fc7db8499652c3dea0efbc1b23a776ddef269b28bb46b0e8939b136dedb39620f527940e3f5b2fcfb980cc738d8f01ba61b3e1e7f1763cd2f23a67
SSDeep
3072:c19zWSyv+nFM/jemovJWnS4wAonYI5YaOK6DCW9XfOdij7hmFo7hOZK6AvxJlcwk:S9zekcZovJW+AlIICu5EFocEvvB5Q
TLSH
EC14125D7013783AD1CE050F5AD9B2E68B72EF2DDB0284414BCB91E0EDA6B486913DCE
3 files
ZIPe4025ca20f5439efbcf96cb7b38a8c24
EXEOrder_details_40353.pdf.exe
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
arc:zip>pe:exe
Shape
arc:zip>pe:exe
2 nodes