Suspect
fdb5b1c351ef0edfef254ff89a173fd6
ZIP Archive
MD5: fdb5b1c351ef0edfef254ff89a173fd6
Size: 118.03 KB
application/zip
This sample is a 115.3 KB ZIP Archive for which Malva.RE's static analysis did not establish a malicious verdict. Static analysis extracted 39 embedded or derived files. It matches 2 YARA rules. The file was analysed statically: it was parsed and decompiled, never executed.
- SHA256
- 427bf5324d72089825d253b3515c0d3615cf65623ff59705ad3b2d6a347bc4b5
- MD5
- fdb5b1c351ef0edfef254ff89a173fd6
- Verdict
- Inconclusive
- File type
- ZIP Archive · 115.3 KB
Cite this report: https://app.malva.re/sha256/427bf5324d72089825d253b3515c0d3615cf65623ff59705ad3b2d6a347bc4b5
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
ZIP archive
Size
118.03 KB · 118,034 B
First seen
2026-09-30 05:15 · 27 days ago
Last seen
2026-09-30 05:15 · 27 days ago
Last analysis
2026-09-30 05:15 · 27 days ago
Hashes
MD5
fdb5b1c351ef0edfef254ff89a173fd6
Sha1
ff6733409e27565058ee84ec556e3f6cc8ffdcd0
Sha256
427bf5324d72089825d253b3515c0d3615cf65623ff59705ad3b2d6a347bc4b5
Sha384
9f06ce941ddeb94b8eecb3df341e90758da90d67e673f0a486b39f1fa5afd84fee7ae5991fb55445e472f9a2994d290f
Sha512
8acf46c245404fc0a3d17e6153af8eca9d13f91b8446dcc82853b2462e7a4d89e5da660d4319d936c5af8bf67643981c9bc76f47279a3c4b45e635fb72e98249
SSDeep
3072:vTySkDZ+RJlMn6w92zijjeUv9UmPuLTLLF:vGDFybS6Ojij0UvB
TLSH
E2B31240A919A8248A2FFD76307888E2D524015060EEFE5F8FF5DF9E45571C0EED83AB
26 files
ZIPfdb5b1c351ef0edfef254ff89a173fd6
EXECrazyNCS.exe
Structure
BINResources
BINRT_CURSOR
BINID:0001
BINID:0
BINID:0002
BINID:0
BINID:0003
BINID:0
BINID:0004
BINID:0
BINID:0005
BINID:0
BINID:0006
BINID:0
BINID:0007
BINID:0
BINRT_BITMAP
BINID:0000
BINID:0
BINRT_ICON
BINID:0001
BINID:1033
BINRT_STRING
BINID:0FF5
BINID:0
BINID:0FF6
BINID:0
BINID:0FF7
BINID:0
BINID:0FF8
BINID:0
BINID:0FF9
BINID:0
BINID:0FFA
BINID:0
BINID:0FFB
BINID:0
BINID:0FFC
BINID:0
BINID:0FFD
BINID:0
BINID:0FFE
BINID:0
BINID:0FFF
BINID:0
BINID:1000
BINID:0
BINRT_RCDATA
BINID:0000
BINID:0
BINRT_GROUP_CURSOR4
BINID:0000
BINID:1033
BINRT_VERSION
BINID:0001
BINID:1033
STICH
beta
No STICH Path has been generated for this analysis yet.
1 structural branch were classified as secondary (decorative or non-determinant content) and did not produce a fingerprint.
bin
126 files
ZIPfdb5b1c351ef0edfef254ff89a173fd6
EXECrazyNCS.exe
No malware configuration was found at this point.
Sign in or create a free account to view the matching YARA rules.
Create a free account