Suspicious
Suspect

f8875e4b33ecbc37ee99f79b6385669a

Share on LinkedIn
Print
ZIP Archive
MD5: f8875e4b33ecbc37ee99f79b6385669a
Size: 545.25 KB
application/zip

This sample is a 532.5 KB ZIP Archive for which Malva.RE's static analysis did not establish a malicious verdict. Static analysis extracted 3 embedded or derived files. It matches 1 YARA rule. The file was analysed statically: it was parsed and decompiled, never executed.

SHA256
5d465643edbbc76e1a28475d021ae0b4556b1bc450d2edf1f6bd6c88dbe08c1d
MD5
f8875e4b33ecbc37ee99f79b6385669a
Verdict
Inconclusive
File type
ZIP Archive · 532.5 KB

Cite this report: https://app.malva.re/sha256/5d465643edbbc76e1a28475d021ae0b4556b1bc450d2edf1f6bd6c88dbe08c1d

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential

File
Type
ZIP archive
Size
545.25 KB · 545,251 B
First seen
2026-10-21 14:01 · 4 days ago
Last seen
2026-10-21 14:01 · 4 days ago
Last analysis
2026-10-21 14:02 · 4 days ago
Hashes
MD5 f8875e4b33ecbc37ee99f79b6385669a Sha1 acbee03cdb8a650c31f01b28acf5ea4680e83926 Sha256 5d465643edbbc76e1a28475d021ae0b4556b1bc450d2edf1f6bd6c88dbe08c1d Sha384 ff2f0e15d7762fcdfb60348e53516f632c9c3d25fa47fb309fe8352cc5f1f3f216573a80259db8d26e59c6d268a9a082 Sha512 01b427da87a13e2f5e3a2588e9633f84480e38bdabb04bf506df94c504cb82bb4a132679dfcefb8b06ccb9f921f4e78dd61a30cffe84fd82d15fd373be206b4c SSDeep 12288:WwU7xz8BpJEZStUqC9j+2v/BfUbiJh/ZimKRkoeUbG8G9rkmya9d15Duy5ye:Wj7xQBEZzDCY/ubsimhQ0bd15DuyL TLSH E2C423E3B353380F98FA02C2A9E22E89253DCFCC6157A53D897A0119B36D7775C9C525

4 files
ZIPf8875e4b33ecbc37ee99f79b6385669a
CMD1Launcher.cmd
TXTprotocol.txt
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

Structural branches: 2 STICH kept: 1secondary ignored: 1
bin 1

Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
Path arc:zip>pe:exe
Shape arc:zip>pe:exe
2 nodes

An error has occurred. This application may no longer respond until reloaded. Reload 🗙