Malicious
103a996e812774381cdb22c5d015e4c8
ZIP Archive
MD5: 103a996e812774381cdb22c5d015e4c8
Size: 587 B
application/zip
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
ZIP archive
Size
587 B · 587 B
First seen
2026-08-03 11:59 · 2 months ago
Last seen
2026-08-03 11:59 · 2 months ago
Last analysis
2026-08-03 11:59 · 2 months ago
Hashes
MD5
103a996e812774381cdb22c5d015e4c8
Sha1
fa671cde36827d8c2c105480fd4d5b8a11db709e
Sha256
0875efe79de91cac9cabe986b2854bc8e348560adb54f1923813a1d8fe0bf40e
Sha384
e302fd4bdc0abed7a06b5833edabee952650b57b87221f790ca5b2d2ebb8ffbe1243053001edf8434d8810015d69a6de
Sha512
4a0582c2a52cf4860b3a988e7e1bd2fdd411fbeec1d5de23616b02d8997ddf5f6c297726b194277100fcd49615d668abb7a3529c4108bc01bcfdd881a4822550
SSDeep
12:5jg40Q/DlYCXLSGYCnOtR7LRDZFFDj0EwL8wae9/1sS40QuYiaG:9AqlYmSGS3RDZ70ECTCmwY
TLSH
C5F0E18D1781D299F62A08BFEA07435C1B28515B6CD3CF368066DC94686319349A5459
3 malicious · 3 files
ZIP103a996e812774381cdb22c5d015e4c8T1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKPDFDOC-CQLPU1.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
arc:zip>lnk~T1059.003~T1202~T1204.002
Shape
arc:zip>lnk
malicious
2 nodes
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential3 malicious · 3 files
ZIP103a996e812774381cdb22c5d015e4c8T1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKPDFDOC-CQLPU1.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
No malware configuration was found at this point.
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
103a996e812774381cdb22c5d015e4c8 › PDFDOC-CQLPU1.lnk
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with EssentialSign in or create a free account to view the matching YARA rules.
Create a free account