Malicious
18b6b099191e2899f106009e1558b7b7
ZIP Archive
MD5: 18b6b099191e2899f106009e1558b7b7
Size: 943 B
application/zip
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
ZIP archive
Size
943 B · 943 B
First seen
2026-08-04 08:06 · 2 months ago
Last seen
2026-08-04 08:06 · 2 months ago
Last analysis
2026-08-04 08:06 · 2 months ago
Hashes
MD5
18b6b099191e2899f106009e1558b7b7
Sha1
06e681394d941726df3cf8eceba6dcb5f6b1f631
Sha256
133fe0fc511913b871b32f2ff2ea6287ca939112c78ff8701d8337005a771d6c
Sha384
d68a556a36937f1d37ccc69b6f427043d55943a5b6c7f57390d56b1c4cc73633f2b7b963a92354e7ce6d33fbdde686be
Sha512
ed31e22150c35cd58c1e2a58bef3ca25c944ba759fc1368a750ba72f7a07bdc83cdf55d207e581cbef6052125d71ae1ed53a4c1532da4c5f31304f7abeeef277
SSDeep
24:9N5y7voDpl0GDe8O1qNxJ/7aJZiHqFl775Ob:9rWen0f8nNxicKFV9Ob
TLSH
F111504F86D3C5C9C87ECC3C6A73A954AA4D524E8017C5B6662C894B31B068F8ECB038
3 malicious · 3 files
ZIP18b6b099191e2899f106009e1558b7b7T1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKDOC-NMW325.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
arc:zip>lnk~T1059.003~T1202~T1204.002
Shape
arc:zip>lnk
malicious
2 nodes
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential3 malicious · 3 files
ZIP18b6b099191e2899f106009e1558b7b7T1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKDOC-NMW325.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
No malware configuration was found at this point.
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
18b6b099191e2899f106009e1558b7b7 › DOC-NMW325.lnk
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with EssentialSign in or create a free account to view the matching YARA rules.
Create a free account