Malicious
18cf1931a176291d654535e3f0391a26
ZIP Archive
MD5: 18cf1931a176291d654535e3f0391a26
Size: 580 B
application/zip
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
ZIP archive
Size
580 B · 580 B
First seen
2026-08-03 10:49 · 2 months ago
Last seen
2026-08-03 10:49 · 2 months ago
Last analysis
2026-08-03 10:49 · 2 months ago
Hashes
MD5
18cf1931a176291d654535e3f0391a26
Sha1
663611efcc886b364bb5b5322127d6c7492ed7a0
Sha256
9468487ab3f8c2f8128d4bb7700de3be8b5061b5efcb79946cd86c562f3cc0f5
Sha384
190085be7070c0116134ea4c7f4211f36b464637e11b21f6b67aa1c2eda94472af861375e0d56f2f4a6d701c921bc52f
Sha512
0300d076c1975c7c74bc62677ced1bf0a9b16817f10393d65b14129c6f55184ac077a9ee0f34afab016265e54eeeb42a008cbf82b0fc174b599ab3d7a61f7a86
SSDeep
12:5jB06/1OkMw75f9fB6j8YwsJ7DW/qNUpKy4zh+JNipo+LvzeWUX7ZFv0P/eaoct:9B0ogkMw75f36esJnW9I0ripo+K7Dv0Z
TLSH
ADF0E1D62209C104C879817C952A5D3966099091559D93598732DAECADB499148036F9
3 malicious · 3 files
ZIP18cf1931a176291d654535e3f0391a26T1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKDOC-PNBJB2.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
arc:zip>lnk~T1059.003~T1202~T1204.002
Shape
arc:zip>lnk
malicious
2 nodes
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential3 malicious · 3 files
ZIP18cf1931a176291d654535e3f0391a26T1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKDOC-PNBJB2.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
No malware configuration was found at this point.
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
18cf1931a176291d654535e3f0391a26 › DOC-PNBJB2.lnk
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with EssentialSign in or create a free account to view the matching YARA rules.
Create a free account