Malicious
ZIP Archive
MD5: 17c0e584ab4a36bd88d5100e438fbf2a
Size: 841 B
application/zip
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
ZIP archive
Size
841 B · 841 B
First seen
2026-08-04 08:34 · 2 months ago
Last seen
2026-08-04 08:34 · 2 months ago
Last analysis
2026-08-04 08:34 · 2 months ago
Hashes
MD5
17c0e584ab4a36bd88d5100e438fbf2a
Sha1
6d20ac32ab098184686b15f0eee61bfdf22ab070
Sha256
94ba52c44428b61931c430ce5fe1d48b55421a76053f2164dada36cb0e3efb6d
Sha384
b15995932c07a38c6dc3d85e6a7b76264847339bd86dc57417c2b9f7fd38b4b98bfc4a7585a41a45ff809537021e9d10
Sha512
cf6f2871ff216563cdc2beced461fafd355b65086e652f973f85fd81c06e97e5ebdafcfb3882680ac7d9acb68b79aeff1ce2c127f10b6eb470265ca3d8434ad2
SSDeep
24:9FeMkZ/6aOPXbTcBRaiHuJpEGmbdt6PhqljexU:94MkZya9BRaiHspElbohqlKxU
TLSH
C40181B108CA478BC5BB8FBF01A33685E5594000493D06280967FD68036FFEA820E722
3 malicious · 3 files
ZIP17c0e584ab4a36bd88d5100e438fbf2aT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKDOC-M44R6H.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
arc:zip>lnk~T1059.003~T1202~T1204.002
Shape
arc:zip>lnk
malicious
2 nodes
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential