Malicious
Malicious

0368c16b99c4714129c6c84c7ec45881

ZIP Archive
MD5: 0368c16b99c4714129c6c84c7ec45881
Size: 837 B
application/zip
Ctrl + scroll to zoom · drag to pan

This sample is a 837 bytes ZIP Archive classified as malicious by Malva.RE (lolbin). Static analysis extracted 2 embedded or derived files. It matches 1 YARA rule. Observed behaviours map to MITRE ATT&CK T1059.003, T1202: INDIRECT COMMAND EXECUTION and T1204.002. The file was analysed statically: it was parsed and decompiled, never executed.

SHA256
90396b08db5fe57cc9a48067ec3b44e90724bcd3f4f2ad427bc71564da85dc3d
MD5
0368c16b99c4714129c6c84c7ec45881
Verdict
Malicious
File type
ZIP Archive · 837 bytes
Category
LOLBin

Cite this report: https://app.malva.re/sha256/90396b08db5fe57cc9a48067ec3b44e90724bcd3f4f2ad427bc71564da85dc3d

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential

File
Type
ZIP archive
Size
837 B · 837 B
First seen
2026-08-03 10:54 · 2 months ago
Last seen
2026-08-03 10:54 · 2 months ago
Last analysis
2026-08-03 10:54 · 2 months ago
Hashes
MD5 0368c16b99c4714129c6c84c7ec45881 Sha1 9525cbc1352a75a86650f42404cabf8d2360e9be Sha256 90396b08db5fe57cc9a48067ec3b44e90724bcd3f4f2ad427bc71564da85dc3d Sha384 788006e0d8e8d266574167f7090a03c459b5550d33d173174ff56d085c31140d8630a7f70528aad3a0b093a5bd2d11b8 Sha512 ae13d055f40c5f00af381c318fd23e42734fbaf3f0a400ae8c251f179d9a94816ba4e436b27c1fdd487d13e09ab4efca83cfec47118689c4751b64409c548edd SSDeep 12:5jOM6JtnOM8Kc1dfTUSFdVK32sv/T45ggCNIRg+q6NS10bkaN/HS3RWb9uRUgM53:9OVfcRT0mgb4CNagoNG04aMGeUgiCg TLSH 8801865A7B14DEC1EDD3D4FF58FF8E05A91E85AAA70F85467098293A4F152D50403934

3 malicious · 3 files
ZIP0368c16b99c4714129c6c84c7ec45881LOLBin
LNKDOC-SES07U.lnkLOLBin
BIN[Lnk Summary]
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
Path arc:zip>lnk~T1059.003~T1202~T1204.002
Shape arc:zip>lnk
malicious 2 nodes

LNK: Command Execution UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential

3 malicious · 3 files
ZIP0368c16b99c4714129c6c84c7ec45881LOLBin
LNKDOC-SES07U.lnkLOLBin
BIN[Lnk Summary]
No malware configuration was found at this point.

LNK: Command Execution UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
0368c16b99c4714129c6c84c7ec45881 › DOC-SES07U.lnk
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential
Sign in or create a free account to view the matching YARA rules. Create a free account
An error has occurred. This application may no longer respond until reloaded. Reload 🗙