Malicious
052a101a102fe2e6af3e2d137ad68d8d
ZIP Archive
MD5: 052a101a102fe2e6af3e2d137ad68d8d
Size: 586 B
application/zip
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
ZIP archive
Size
586 B · 586 B
First seen
2026-08-03 12:08 · 2 months ago
Last seen
2026-08-03 12:08 · 2 months ago
Last analysis
2026-08-03 12:08 · 2 months ago
Hashes
MD5
052a101a102fe2e6af3e2d137ad68d8d
Sha1
b53b3d3a21de55a99f9071dc4b494d88ee6c6f9b
Sha256
2a87f0a66ba4a5612a6953206c813d1297ad7d7f49d6d66f4342906eaf0378cc
Sha384
397b5c4b2a1b20ba5ac1c63da22acfc80e8b6acc26d7986e167aca04058c76b64bbd54391aa1312013f3a9b74ca74e26
Sha512
1fbd4d6500d9c40a031440fa673778fe568307775eaf871768349b8d7e8a198edffc825e34002dc238475bf119a9fdd5ab16f991edd43a57665fa6d5f54b8618
SSDeep
12:5jTruwLCHnoQY4ZvllH1JB2bmhAA5dAjacWPYVkfQMlyVXOySJtVruVahtn:9Trt+RYa9l/BThAA5dWXWQ1vOySHVrJ
TLSH
11F026E25D3DD3C7E06190F498237533141C4C653D57FF5AB52841571956244057CF55
3 malicious · 3 files
ZIP052a101a102fe2e6af3e2d137ad68d8dT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKPDFDOC-HMK70P.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
arc:zip>lnk~T1059.003~T1202~T1204.002
Shape
arc:zip>lnk
malicious
2 nodes
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential3 malicious · 3 files
ZIP052a101a102fe2e6af3e2d137ad68d8dT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKPDFDOC-HMK70P.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
No malware configuration was found at this point.
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
052a101a102fe2e6af3e2d137ad68d8d › PDFDOC-HMK70P.lnk
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with EssentialSign in or create a free account to view the matching YARA rules.
Create a free account