Malicious
0411248e05146eb51f35a92edd93efa0
ZIP Archive
MD5: 0411248e05146eb51f35a92edd93efa0
Size: 584 B
application/zip
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
ZIP archive
Size
584 B · 584 B
First seen
2026-08-03 11:03 · 2 months ago
Last seen
2026-08-03 11:03 · 2 months ago
Last analysis
2026-08-03 11:04 · 2 months ago
Hashes
MD5
0411248e05146eb51f35a92edd93efa0
Sha1
d93ce9db279f402d87187b27ad5f39d0a4d59d19
Sha256
aff1324757ab08a8d86e067f797ecf98c64292650c38940c2fe63486759dab7a
Sha384
c373b85fc61b45eba3872bf92595ec6f2b801a4f1568a4b34106d09568a93827774ff1881403b9af682797ab4da3dd40
Sha512
69fd55bdbd73e34d2fc0a35ef6f2704d461abc9896067cb75f968d4b5c0e29fec6fc71f5d982d2d002d87210347e9259be222997268cb4244fd3cdf4ff3f4390
SSDeep
12:5jElRwLoHUiGy7jJEwTM8MJtXAl9SvVW30flGtc5a1fBalSwcaoo:9ElRhb7jKwA8+tXwv0ff5a1fBalSzo
TLSH
99F0E16655A4502DE56BC47D8917085C85550080044B65357A8CDE4C89385BFB38E5F9
3 malicious · 3 files
ZIP0411248e05146eb51f35a92edd93efa0T1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKDOC-GCYIL2.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
arc:zip>lnk~T1059.003~T1202~T1204.002
Shape
arc:zip>lnk
malicious
2 nodes
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential3 malicious · 3 files
ZIP0411248e05146eb51f35a92edd93efa0T1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKDOC-GCYIL2.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
No malware configuration was found at this point.
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
0411248e05146eb51f35a92edd93efa0 › DOC-GCYIL2.lnk
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with EssentialSign in or create a free account to view the matching YARA rules.
Create a free account