Malicious
0d4426ffa6cb38c682e8bd0dba098156
ZIP Archive
MD5: 0d4426ffa6cb38c682e8bd0dba098156
Size: 975 B
application/zip
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
ZIP archive
Size
975 B · 975 B
First seen
2026-08-03 10:55 · 2 months ago
Last seen
2026-08-03 10:55 · 2 months ago
Last analysis
2026-08-03 10:55 · 2 months ago
Hashes
MD5
0d4426ffa6cb38c682e8bd0dba098156
Sha1
f9b016760ddee6f836d099a9e5c672ef6780d7db
Sha256
111ef08b223126d34dc80e584e38c3f034cdc9f28a60cd8dd6cf32655b3a9a8d
Sha384
7822d3bdfa2c90babcad540d347a172c37f9be80b87bf838778131c7c61ccca62685de45cbd288646595348efd1b07f4
Sha512
99ac7c3b6ab2d172638ba188b7f6233561793da7b869fb8b4bd2e5ddd9c991cb1da46652e1feb7aa25f26cd8971d5d15450eada90db039f062c830db026a9f95
SSDeep
24:9qtAjr546YrTXKcH7sti3vO0hoaJuW9PPCTNZ7DzOnDhIBOjYo2Q2cC7:9rKTacHwtUvO0PvPCH3ODF8GC7
TLSH
761154A0D0533101D571ED73ADEA79F52621B259E24DBDBF106DB95066B60C2099A0E8
3 malicious · 3 files
ZIP0d4426ffa6cb38c682e8bd0dba098156T1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKDOC-G654GU.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
arc:zip>lnk~T1059.003~T1202~T1204.002
Shape
arc:zip>lnk
malicious
2 nodes
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential3 malicious · 3 files
ZIP0d4426ffa6cb38c682e8bd0dba098156T1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKDOC-G654GU.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
No malware configuration was found at this point.
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
0d4426ffa6cb38c682e8bd0dba098156 › DOC-G654GU.lnk
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with EssentialSign in or create a free account to view the matching YARA rules.
Create a free account