Malicious
0052972f7f892c2aed2147fd26fa86dd
ZIP Archive
MD5: 0052972f7f892c2aed2147fd26fa86dd
Size: 595 B
application/zip
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
ZIP archive
Size
595 B · 595 B
First seen
2026-08-03 13:21 · 2 months ago
Last seen
2026-08-03 13:21 · 2 months ago
Last analysis
2026-08-03 13:21 · 2 months ago
Hashes
MD5
0052972f7f892c2aed2147fd26fa86dd
Sha1
644c5fe8a55752327c78f5f3e069772d11f7b5be
Sha256
5557e732b815abd00ac3f7bb03097d4f40ac41783ee3f4ea385f0133f4ccd0fa
Sha384
9a88b591b087593494aa6750db9f24060e39f09d14323311eb8e97641f24a3226c581fe3a220142843fcae70eaaaf997
Sha512
2fa57b10623514dff770519cf3e6fefca6e84f5699ef75c090220f84c9f7917ec6c7b8de5c299f9c6398340ac48ea7c20e34087ce777409f0d735692d14e4b4e
SSDeep
12:5jkmYjIUQCtLN00ly3pyu2Wn01ZLibCvsl3WEGoae:9kmYjIUQCJN0Hyubn0zyCvY3WEGC
TLSH
B4F0967E1A38715BE41EA8303014150B9D6CD98390676AEF8139E4A366F059208399E2
3 malicious · 3 files
ZIP0052972f7f892c2aed2147fd26fa86ddT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKnf_e_-25S5SH.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
arc:zip>lnk~T1059.003~T1202~T1204.002
Shape
arc:zip>lnk
malicious
2 nodes
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential3 malicious · 3 files
ZIP0052972f7f892c2aed2147fd26fa86ddT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKnf_e_-25S5SH.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
No malware configuration was found at this point.
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
0052972f7f892c2aed2147fd26fa86dd › nf_e_-25S5SH.lnk
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with EssentialSign in or create a free account to view the matching YARA rules.
Create a free account