Suspicious
Suspect

edd36dd59bcd5c5451335d87aa864278

ZIP Archive
MD5: edd36dd59bcd5c5451335d87aa864278
Size: 1.56 MB
application/zip

This sample is a 1.5 MB ZIP Archive for which Malva.RE's static analysis did not establish a malicious verdict. Static analysis extracted 35 embedded or derived files. The file was analysed statically: it was parsed and decompiled, never executed.

SHA256
db24a0777794c1a752311ceca1093d2f4c7741e2ae8eb48ab4081709ddd76283
MD5
edd36dd59bcd5c5451335d87aa864278
Verdict
Inconclusive
File type
ZIP Archive · 1.5 MB

Cite this report: https://app.malva.re/sha256/db24a0777794c1a752311ceca1093d2f4c7741e2ae8eb48ab4081709ddd76283

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential

File
Type
ZIP archive
Size
1.56 MB · 1,559,008 B
First seen
2026-09-16 03:15 · one month ago
Last seen
2026-09-16 03:15 · one month ago
Last analysis
2026-09-16 03:15 · one month ago
Hashes
MD5 edd36dd59bcd5c5451335d87aa864278 Sha1 0a2ff57e14f9551916cd3113c5cf7cdf265622b9 Sha256 db24a0777794c1a752311ceca1093d2f4c7741e2ae8eb48ab4081709ddd76283 Sha384 2769d7545d2e50397a3b288d78a62cbc9f292aa249bda434d2ce9c640f2bcb942394fca336c64ee51068fcdc5ca71ff2 Sha512 032d284515134fd5931dcec581320075106a06d1a86c9ae853dfc325ed66f58a04f6ad120bcbf6d70d4c1306b88cec94eacab3409f4779bcb9c7542aada2c41e SSDeep 24576:Nw5T8ED+6QnwqFzUAa65wuwDxtr38a5CcX7ZqIVU3JG6d/iLyPz1P9J39L+4aVJQ:2IEq6QnwMzLcv3p5CWAIW3Fd6u9n3VT TLSH 847533069668E813FCF35275474DB3E9CAC9701A0ED05AAB4DB542208D5FFD84D2CDBA

36 files
ZIPedd36dd59bcd5c5451335d87aa864278
BINLICENSE_toggle-sprint-display
BINMETA-INF
MFMANIFEST.MF
BINjars
ZIPgithub-mixin-loader-2.5.2-obfuscated.jar
BINMETA-INF
MFMANIFEST.MF
BINiywceba
BINsay3
BINuwgxdrw8hu
BIN$$0.class
BINo.class
BINoiO.class
BINj.class
BINj_O.class
BINbw8hu85v
BINdfahycjbg
BINxdssct
BINd
BINd5982d951.class
BINd824d5a7b.class
BINd56e8382c.class
BINd22ac63db.class
BINdce531460.class
BINdc9d8806.class
BINdee45458e.class
BINdf36a2ca3.class
BINd3137a457.class
BINd16be295a.class
BINd54de3be3.class
BINd12a3965.class
BINVM.class
BINVM$MemberRef.class
BINGuard.class
BINvm.bin
BINintegrity.bin
BINvault.bin
JSONfabric.mod.json
BINassets
BINtoggle-sprint-display
IMGicon.png
IMGicon.png-preview.png
BINlang
JSONen_us.json
BINcom
BINaeltumn
BINtogglesprintdisplay
BINmixin
BINGuiMixin.class
JSONfabric.mod.json
JSONtoggle-sprint-display-refmap.json
JSONtoggle-sprint-display.mixins.json
STICH beta

No STICH Path has been generated for this analysis yet.

3 structural branches were classified as secondary (decorative or non-determinant content) and did not produce a fingerprint.

bin 2img 1

36 files
ZIPedd36dd59bcd5c5451335d87aa864278
BINLICENSE_toggle-sprint-display
JSONfabric.mod.json
JSONtoggle-sprint-display-refmap.json
JSONtoggle-sprint-display.mixins.json
No malware configuration was found at this point.
Sign in or create a free account to view the matching YARA rules. Create a free account
An error has occurred. This application may no longer respond until reloaded. Reload 🗙