Suspicious
Suspect

fe5e78abcc3ea3bc1d932f524622fc89

Share on LinkedIn
Print
ZIP Archive
MD5: fe5e78abcc3ea3bc1d932f524622fc89
Size: 7.2 MB
application/zip

This sample is a 6.9 MB ZIP Archive for which Malva.RE's static analysis did not establish a malicious verdict. Static analysis extracted 17 embedded or derived files. It matches 1 YARA rule. The file was analysed statically: it was parsed and decompiled, never executed.

SHA256
1e7707c81093eda74eed67835feb6341f9c67b83488c120c7e1b4cf66f49ee1a
MD5
fe5e78abcc3ea3bc1d932f524622fc89
Verdict
Inconclusive
File type
ZIP Archive · 6.9 MB

Cite this report: https://app.malva.re/sha256/1e7707c81093eda74eed67835feb6341f9c67b83488c120c7e1b4cf66f49ee1a

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential

File
Type
ZIP archive
Size
7.2 MB · 7,196,361 B
First seen
2026-09-23 15:15 · one month ago
Last seen
2026-09-23 15:15 · one month ago
Last analysis
2026-09-23 15:15 · one month ago
Hashes
MD5 fe5e78abcc3ea3bc1d932f524622fc89 Sha1 a0fc018d65c9686d2f7c49965b924bf6c4b92699 Sha256 1e7707c81093eda74eed67835feb6341f9c67b83488c120c7e1b4cf66f49ee1a Sha384 654c2a199f104767f6dd787694381553e370bc67cd8ae737c7b8b2c594a48fcfec4d434fb2b5e2d965e77c88dc07bdef Sha512 d33006d72425aab762d2b94a79b47b63eddc8feb008438713fc137a0345874cc69810655ba5d42ff44c08a1f6bfb9ee59bc04d6ae519e9ad04a2c148cbf1fbf3 SSDeep 196608:HVpd7lvK1gNMCjKpWv20IwrnNMD4rVxc3QBAUPS6A:1pm1WROpWDrn60rKAS9 TLSH 5D763365FE4394FDD8D84CB40269FAA1B7B63007B37AA2C72B73E11894C528DCB61B45

18 files
ZIPfe5e78abcc3ea3bc1d932f524622fc89
DLLProtobufLite.dll
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

Structural branches: 5 STICH kept: 1secondary ignored: 4
bin 4

Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
Path arc:zip>pe:dll
Shape arc:zip>pe:dll
2 nodes

An error has occurred. This application may no longer respond until reloaded. Reload 🗙