Malicious
041c2491cf947df419a314d4cd8a2f2d
ZIP Archive
MD5: 041c2491cf947df419a314d4cd8a2f2d
Size: 589 B
application/zip
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
ZIP archive
Size
589 B · 589 B
First seen
2026-08-03 11:20 · 2 months ago
Last seen
2026-08-03 11:20 · 2 months ago
Last analysis
2026-08-03 11:20 · 2 months ago
Hashes
MD5
041c2491cf947df419a314d4cd8a2f2d
Sha1
94b2a36ad4b80c66d3f487c75cf4061f54646a36
Sha256
a26bf263f5513409b8b033b49970619ff0819222809870344a3f07bae5ba5a50
Sha384
94ea52dc7fd47992a4a6184b5c181e16e5d6061b337d94e8c80899225205cb85bdf8ba052da1f6c99c2fa92be4282fdb
Sha512
9ea23d600b80f908c6cdda765b4bd987761109748ffea7fbf66af8fe3c216aafd7d076d002677e71606177fbdcc9266bae15053291a7f6ec3ebf1e0c6814602a
SSDeep
12:5jhUuugcnbStCwgsiM9NrPuOVA8dDMaDhQCUr5EJpjN/ykOxwGBnSaor:9aaOm+sv9NqO2oDhQqN/y5Byr
TLSH
6DF0E12A0B0D80C3D13AF7F54125FAF50E55DA23912B766945A0DF019918496A6684A4
3 malicious · 3 files
ZIP041c2491cf947df419a314d4cd8a2f2dT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKDOC-4T99XR.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
arc:zip>lnk~T1059.003~T1202~T1204.002
Shape
arc:zip>lnk
malicious
2 nodes
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential3 malicious · 3 files
ZIP041c2491cf947df419a314d4cd8a2f2dT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKDOC-4T99XR.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
No malware configuration was found at this point.
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
041c2491cf947df419a314d4cd8a2f2d › DOC-4T99XR.lnk
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with EssentialSign in or create a free account to view the matching YARA rules.
Create a free account