Malicious Archive / .ZIP — malware analysis report

Static analysis result for SHA-256 af62659973731586…

MALICIOUS

Archive / .ZIP

10.20 MB
MD5: 35a5bc0c10feab5cbb10701537f771af SHA-1: f9195ce68b26c1d71e62c87752387144e78be028 SHA-256: af62659973731586730c830af42095de8c75bd829b92eacd93044b4f33eaf555
62 Risk Score

Malware Insights

MITRE ATT&CK
T1566.001 Spearphishing Attachment

The archive file exceeded its entry limit, indicating a large number of contained files. One of the scanned members was identified as malicious, suggesting this archive is a container for further malicious content. The specific nature of the contained malicious file could not be determined due to the archive structure.

Heuristics 2

  • Archive contains malicious member critical ARCHIVE_CHILD_MALICIOUS
    At least one extracted archive member was classified as malicious. The archive is a transport wrapper for that payload.
  • Archive entry limit reached (50) info ARCHIVE_LIMIT
    Only the first 50 files were scanned.