Malicious
Malicious

0d8a7b3d2bbf9106ea02ea54efc3ba67

ZIP Archive
MD5: 0d8a7b3d2bbf9106ea02ea54efc3ba67
Size: 926 B
application/zip
Ctrl + scroll to zoom · drag to pan

This sample is a 926 bytes ZIP Archive for which Malva.RE's static analysis did not establish a malicious verdict. Static analysis extracted 2 embedded or derived files. It matches 1 YARA rule. Observed behaviours map to MITRE ATT&CK T1059.003, T1202: INDIRECT COMMAND EXECUTION and T1204.002. The file was analysed statically: it was parsed and decompiled, never executed.

SHA256
97ed1ce8209df2511482d79c100b23f7b21014235fd659963e67820fd0226501
MD5
0d8a7b3d2bbf9106ea02ea54efc3ba67
Verdict
Malicious
File type
ZIP Archive · 926 bytes
Category
LOLBin

Cite this report: https://app.malva.re/sha256/97ed1ce8209df2511482d79c100b23f7b21014235fd659963e67820fd0226501

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential

File
Type
ZIP archive
Size
926 B · 926 B
First seen
2026-08-04 08:19 · 2 months ago
Last seen
2026-08-04 08:19 · 2 months ago
Last analysis
2026-08-04 08:19 · 2 months ago
Hashes
MD5 0d8a7b3d2bbf9106ea02ea54efc3ba67 Sha1 92951eeaf00f5a5b373393563389aa9679544abe Sha256 97ed1ce8209df2511482d79c100b23f7b21014235fd659963e67820fd0226501 Sha384 bed0925481f1c50a1dfe0d197129d736d81b98d2dbabb5341e3cc65d8179d9c2dcae6c03896776e1cee3f4b35d2faac4 Sha512 37bce5d4fce92c419a924e8491aae7d3ac116d96ee6e48317f0dcb09cedc822ee6e54a351dbb09eb31db9bd061232bcd20fcf54eb101102a260f1f6357162e69 SSDeep 24:9tImjqKNTGKN2l7S/lNEiSTTbGwR1WYSXtVs4wPjLYl:9tImVTGa/lsRkYutVsBPjLYl TLSH 2411442066CF15E0D895CCF926D9616A02754C1C406D9BA2177DE8242B620C80661ABF

3 malicious · 3 files
ZIP0d8a7b3d2bbf9106ea02ea54efc3ba67LOLBin
LNKDOC-MQ82NW.lnkLOLBin
BIN[Lnk Summary]
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
Path arc:zip>lnk~T1059.003~T1202~T1204.002
Shape arc:zip>lnk
malicious 2 nodes

LNK: Command Execution UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential

3 malicious · 3 files
ZIP0d8a7b3d2bbf9106ea02ea54efc3ba67LOLBin
LNKDOC-MQ82NW.lnkLOLBin
BIN[Lnk Summary]
No malware configuration was found at this point.

LNK: Command Execution UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
0d8a7b3d2bbf9106ea02ea54efc3ba67 › DOC-MQ82NW.lnk
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential
Sign in or create a free account to view the matching YARA rules. Create a free account
An error has occurred. This application may no longer respond until reloaded. Reload 🗙