Malicious
028c312b441dca35be5ef177e3035488
ZIP Archive
MD5: 028c312b441dca35be5ef177e3035488
Size: 592 B
application/zip
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
ZIP archive
Size
592 B · 592 B
First seen
2026-08-04 07:47 · 2 months ago
Last seen
2026-08-04 07:47 · 2 months ago
Last analysis
2026-08-04 07:47 · 2 months ago
Hashes
MD5
028c312b441dca35be5ef177e3035488
Sha1
5c695cede979d6d0bf2ab9023ad26cc659617d8f
Sha256
bfbeebcafb691f602c1a1a9f4b28988fda40a11e70072fa2ea2e005b0e42171e
Sha384
a5dd30c42b21418d51eba1de94ca10c114855881a514ad4dabff12412950ba2bdbb15462dae5cef318a3b17386872ffb
Sha512
f93a76c9f058be20992f5ff9fdbb39d1e7c9a71b7b789f983a283f88b607ac9f3f9d609c516b6c1d892c53352ce06320b5a9fb0c1724e4b8f957d0bfe5b1cb5a
SSDeep
12:5jGLkIqLiPUWiU5to48D/HqR1ttYZCJ9KaM0H2bAzi9fRnIfaoAt:9GLk9LMiUfozKR1ttOCJ9a0H20i9RnIW
TLSH
87F0413D87505809D92280BE5C77AD88E511D1860F280F0681B7D0023D6EBC329423A7
3 malicious · 3 files
ZIP028c312b441dca35be5ef177e3035488T1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKDOC-N94KAD.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
arc:zip>lnk~T1059.003~T1202~T1204.002
Shape
arc:zip>lnk
malicious
2 nodes
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential3 malicious · 3 files
ZIP028c312b441dca35be5ef177e3035488T1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKDOC-N94KAD.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
No malware configuration was found at this point.
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
028c312b441dca35be5ef177e3035488 › DOC-N94KAD.lnk
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with EssentialSign in or create a free account to view the matching YARA rules.
Create a free account