Malicious
04bd4d43f7558b2d84d04558159dfe9c
ZIP Archive
MD5: 04bd4d43f7558b2d84d04558159dfe9c
Size: 591 B
application/zip
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
ZIP archive
Size
591 B · 591 B
First seen
2026-08-04 08:19 · 2 months ago
Last seen
2026-08-04 08:19 · 2 months ago
Last analysis
2026-08-04 08:19 · 2 months ago
Hashes
MD5
04bd4d43f7558b2d84d04558159dfe9c
Sha1
61b1fca114c10c94414344d707e2b04fadc6a832
Sha256
2fd47b9f84a789ef0bf1aa4d81217d7971df2a67ce0ce5ea90de932a9253dca4
Sha384
29e1691fd4b1de249a436a1b205f6a7f10d65ecb0b3414567a055113aafcd03d6d81cdd5e9a664ab6a270c3f3ce0d8d0
Sha512
1d0ed1c53e056895569476a3c48954514e183321afa4cf6952eb30bcb02e0a47f9b12054d130cd7daffef942c4fef1135d3e2228b71db839282a888616e8f63d
SSDeep
12:5j5cJIAuYhHwga4LM9khJK9c0XNNprG4t84d5m8IFQw4izcRaox/:957hYhQga4LM9iJve5G4t84XmkEz8x/
TLSH
D0F041AF2D0EA921C40940BC0F24902FC2C0E40A79CBC29B2F7858C65D886DA6282120
3 malicious · 3 files
ZIP04bd4d43f7558b2d84d04558159dfe9cT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKDOC-3837ZF.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
arc:zip>lnk~T1059.003~T1202~T1204.002
Shape
arc:zip>lnk
malicious
2 nodes
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential3 malicious · 3 files
ZIP04bd4d43f7558b2d84d04558159dfe9cT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKDOC-3837ZF.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
No malware configuration was found at this point.
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
04bd4d43f7558b2d84d04558159dfe9c › DOC-3837ZF.lnk
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with EssentialSign in or create a free account to view the matching YARA rules.
Create a free account