Malicious
16c4324de3bb60d5923160b140ac1d17
ZIP Archive
MD5: 16c4324de3bb60d5923160b140ac1d17
Size: 586 B
application/zip
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
ZIP archive
Size
586 B · 586 B
First seen
2026-08-03 12:16 · 2 months ago
Last seen
2026-08-03 12:16 · 2 months ago
Last analysis
2026-08-03 12:16 · 2 months ago
Hashes
MD5
16c4324de3bb60d5923160b140ac1d17
Sha1
b96595f0c12f587a7164522f4b400c6dbb82526d
Sha256
a21ff915c612590047255cbcb5ae0eda5563b75c39f3bd4e2e9cff337a40a018
Sha384
5a13b1f9813052e8ee4731dc17702c5d430bf419f72b76d68d3012e44292022fe78da65cfa4facdc9e58f43739e86846
Sha512
73cfa880c7982a6e0e45e06e795e769edebf3c1a44abc74f29d3709916fc7549cad43ab719c9fa118252c6b1845697e06c6d229a1c44a14012808f2f97b7bb4b
SSDeep
12:5jIsNAvXzqrObFDqKQgdP3ECZlo9afd8EvJ81W8lKLSplmSXcOsN5ahtn:9IsNAfeaFDRb0CZlosfd8EvJnZLL4cOB
TLSH
83F0263DDE40DE57D010C0F35255A29E17F0A9B4E12F7A46774EBE4C48E71C054C55E4
3 malicious · 3 files
ZIP16c4324de3bb60d5923160b140ac1d17T1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKPDFDOC-649WGG.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
arc:zip>lnk~T1059.003~T1202~T1204.002
Shape
arc:zip>lnk
malicious
2 nodes
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential3 malicious · 3 files
ZIP16c4324de3bb60d5923160b140ac1d17T1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKPDFDOC-649WGG.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
No malware configuration was found at this point.
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
16c4324de3bb60d5923160b140ac1d17 › PDFDOC-649WGG.lnk
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with EssentialSign in or create a free account to view the matching YARA rules.
Create a free account