Suspicious
Suspect

e5b913be1f0f44b7834ae37936fea8b5

Share on LinkedIn
Print
ZIP Archive
MD5: e5b913be1f0f44b7834ae37936fea8b5
Size: 1.17 KB
application/zip

This sample is a 1.1 KB ZIP Archive for which Malva.RE's static analysis did not establish a malicious verdict. Static analysis extracted 2 embedded or derived files. It matches 1 YARA rule. The file was analysed statically: it was parsed and decompiled, never executed.

SHA256
9a8701b2552a6168c0834ec54019240176ed6bf6bbbfc78c48c4f1e3f06005af
MD5
e5b913be1f0f44b7834ae37936fea8b5
Verdict
Inconclusive
File type
ZIP Archive · 1.1 KB

Cite this report: https://app.malva.re/sha256/9a8701b2552a6168c0834ec54019240176ed6bf6bbbfc78c48c4f1e3f06005af

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential

File
Type
ZIP archive
Size
1.17 KB · 1,168 B
First seen
2026-10-16 13:15 · 16 days ago
Last seen
2026-10-16 13:15 · 16 days ago
Last analysis
2026-10-16 13:15 · 16 days ago
Hashes
MD5 e5b913be1f0f44b7834ae37936fea8b5 Sha1 bf52e103fe4d1003cce96686a0328656dad413ce Sha256 9a8701b2552a6168c0834ec54019240176ed6bf6bbbfc78c48c4f1e3f06005af Sha384 28d78321bc9fb6a8736c52ee99d56195078007209a9124c300d83171b54021ffff607e6bd6bd40c483f3b7d7fbac0d03 Sha512 d89e1e6249368f7ad4e2dd6cf7f5fe3659aa17111573da216799413598663a8bb4afb928c06753b4372e045d348b5fdac1abe8afc73c2ad637bccbca9435dfe2 SSDeep 24:9lGidvvD4PXZWeNEVCCk8cLZVfb5zhhCg7qanb3xhS/VHpGq6x:9JNSJTWV4lTfNlqab34tq TLSH F121D7CA637A7060CF6B6030000950A6DAC8E8CD022EDE494A1EB60A107E2ACE7794E6

3 files
ZIPe5b913be1f0f44b7834ae37936fea8b5
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
Path arc:zip>lnk
Shape arc:zip>lnk
2 nodes

An error has occurred. This application may no longer respond until reloaded. Reload 🗙