Malicious
ZIP Archive
MD5: 0491649a18dd3d6079a6531443a38426
Size: 838 B
application/zip
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
ZIP archive
Size
838 B · 838 B
First seen
2026-08-03 13:27 · 2 months ago
Last seen
2026-08-03 13:27 · 2 months ago
Last analysis
2026-08-03 13:27 · 2 months ago
Hashes
MD5
0491649a18dd3d6079a6531443a38426
Sha1
de68ae60925f9c63734c17a3ddcb22983716096c
Sha256
b42e71fef5d9a659af677bf86afe261150b6259e9d38f986630b52bf857fb70a
Sha384
76525a7dc7ea2fdad4476f9b0090d3856a96b69d0fefaa815b00e38aaac5e4a050442050fd8889685db8dbef61b17ad3
Sha512
270bbc90b4c12e6d9b3e75f611ce955890a9200602c2e83b4de8612030fa924b3983e17aaf2e907a092d54b397e7cb711cdc3be955dcce53297bd7becbcbac7c
SSDeep
24:9s1Vp39uKQgvvBCPU6/npm76lQrTnHKxicofO1Mp6R:9s1Pvg8w4vHKxfwO1vR
TLSH
3601867BC5043405D46232B77217123E5AEFC914050702015FC5FB5015F07A1FB19078
3 malicious · 3 files
ZIP0491649a18dd3d6079a6531443a38426T1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKDOC-V81863.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
arc:zip>lnk~T1059.003~T1202~T1204.002
Shape
arc:zip>lnk
malicious
2 nodes
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential