Suspicious
Suspect

efab24b615812d60cf4e14cba9871cd6

ZIP Archive
MD5: efab24b615812d60cf4e14cba9871cd6
Size: 585.38 KB
application/zip

This sample is a 571.7 KB ZIP Archive for which Malva.RE's static analysis did not establish a malicious verdict. Static analysis extracted 3 embedded or derived files. It matches 1 YARA rule. The file was analysed statically: it was parsed and decompiled, never executed.

SHA256
e3297dc3985245678551d8fceb4dc6ec1c48dde373dc5de601071aaf34fe8694
MD5
efab24b615812d60cf4e14cba9871cd6
Verdict
Inconclusive
File type
ZIP Archive · 571.7 KB

Cite this report: https://app.malva.re/sha256/e3297dc3985245678551d8fceb4dc6ec1c48dde373dc5de601071aaf34fe8694

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential

File
Type
ZIP archive
Size
585.38 KB · 585,382 B
First seen
2026-10-21 14:01 · 6 days ago
Last seen
2026-10-21 14:01 · 6 days ago
Last analysis
2026-10-21 14:02 · 6 days ago
Hashes
MD5 efab24b615812d60cf4e14cba9871cd6 Sha1 41a84608f1d1415de5573bb372d031cecfa7aabb Sha256 e3297dc3985245678551d8fceb4dc6ec1c48dde373dc5de601071aaf34fe8694 Sha384 0a6a5c6e09db89563c60d997efa466e2b36d45b2976a5e530f117c4bdcaf0a8230a6247cd04712a916c194bd30935687 Sha512 33452227bf9753d5866791efbaac5513b54bf28edea0571af7bccc47068fe121d15d3b298c638b2204a66841aababfaddecde9baa73714d2ef00260a04424d42 SSDeep 12288:gdevMEkFmHk56wlOMWROC/FTeHo22Qm7NzofOrAHmF:Uemt4MQOC/gHozN7NzomME TLSH 3AC423195942D2CE83D43F7E8EC0BBA03E7990EBEB0DFA0416DA35917C95251B3D492B

4 files
ZIPefab24b615812d60cf4e14cba9871cd6
CMDApplication.cmd
TXTpackage.txt
EXEunit.exe
Structure
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

Structural branches: 2 STICH kept: 1secondary ignored: 1
bin 1

Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
Path arc:zip>pe:exe
Shape arc:zip>pe:exe
2 nodes

4 files
ZIPefab24b615812d60cf4e14cba9871cd6
CMDApplication.cmd
TXTpackage.txt
No malware configuration was found at this point.
Sign in or create a free account to view the matching YARA rules. Create a free account
An error has occurred. This application may no longer respond until reloaded. Reload 🗙