Malicious
ZIP Archive
MD5: 01511ffa3cb2a2453bc86e00867538b0
Size: 589 B
application/zip
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
ZIP archive
Size
589 B · 589 B
First seen
2026-08-04 08:34 · 2 months ago
Last seen
2026-08-04 08:34 · 2 months ago
Last analysis
2026-08-04 08:34 · 2 months ago
Hashes
MD5
01511ffa3cb2a2453bc86e00867538b0
Sha1
f7d941fa6c47e270e3fbe68d5ebfaead26a085c5
Sha256
af6b30acfcde0fc65852bfe1efa6501d0feb49cc7f707d851b928001ea1c3546
Sha384
35523e906813f83660e951a99d73e77161c82cdc06e726bd526d50a1c4f53433a23f7b9ca651c61d9c3465bfef417911
Sha512
877540a2bfb7469b043c14368c6483ae56ac04df7aa892694e424cb863615a8d29e1b7e57bfac38e64f347f5cf74162bb2a12b357507475b043ba1784699b6e3
SSDeep
12:5jXukIq13bcaa0A2yjPGAjEo4q6Lvwfi1k0ANeagIxc5ckIpJaor:9Xuk9tbF47vEaBfw/ANeX+eIpXr
TLSH
0BF04147AF299C1CE21F403B31872AB34675B042450AECDAC330E4CBCD806D049418D6
3 malicious · 3 files
ZIP01511ffa3cb2a2453bc86e00867538b0T1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKDOC-ICR2QP.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
arc:zip>lnk~T1059.003~T1202~T1204.002
Shape
arc:zip>lnk
malicious
2 nodes
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential