Malicious
ZIP Archive
MD5: 0b3947e2816130704850719e072bacee
Size: 595 B
application/zip
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
ZIP archive
Size
595 B · 595 B
First seen
2026-08-03 11:07 · 2 months ago
Last seen
2026-08-03 11:07 · 2 months ago
Last analysis
2026-08-03 11:07 · 2 months ago
Hashes
MD5
0b3947e2816130704850719e072bacee
Sha1
eb9690b4fc7a00be152f23ce558e3070e112061e
Sha256
0e60cddf50bbbfd55ad81f0d93cd338458e6ffa9e4582db3a338091a6c33cfdb
Sha384
cbaa97dbbec9da4d0f9be8f7885106df68612ed64d08caeb5080cdfc7898f22aa2c6f124af9e15542609b2c5f5c7bffd
Sha512
5ed53c420a3b12e7580576e08f276a6ac9b08f45ed984df661111a3b726134aa682fbd916259ef0aaaddbe5fa674518947a0c32f05668ca19d613dcce12585ab
SSDeep
12:5jBOi532kOjwHGjJ/w+mfNVZZpOZqdJnpl2k+Q7lqLR6WEIBkOPaoO:9Z2kOjOswPfNVRdJnpskH7uPBxO
TLSH
D0F041F3A7340A10C90AA6BA953C307D4B2341AF184A1E2A1631DCEA2BD122A56A906D
3 malicious · 3 files
ZIP0b3947e2816130704850719e072baceeT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKDOC-I2B7FD.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
arc:zip>lnk~T1059.003~T1202~T1204.002
Shape
arc:zip>lnk
malicious
2 nodes
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential