Malicious
18da09a32cdd3b8c95524732117ca975
ZIP Archive
MD5: 18da09a32cdd3b8c95524732117ca975
Size: 976 B
application/zip
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
ZIP archive
Size
976 B · 976 B
First seen
2026-08-04 08:01 · 2 months ago
Last seen
2026-08-04 08:01 · 2 months ago
Last analysis
2026-08-04 08:01 · 2 months ago
Hashes
MD5
18da09a32cdd3b8c95524732117ca975
Sha1
2b6db9a8c89095d56a1366d497fba10880b0347d
Sha256
022983be0086758bc85e062e068d781c92006bcf5a41dabfb020c6f23b56d01d
Sha384
e6a24729a650184923123ec3a30733e71ffc7845fcf5f236a70f0ed0690029c8a1047af2f39c816aa30bc5ee57906066
Sha512
500e0dc5606cb87087114fe093a73a0ee333011601807c6f7cf721cb8a3bea807b3861363b26147151942d524e9187ebc4d6f3ff5e20b1d89d66100cfbcb59f5
SSDeep
24:9VCG5Auv1brBHQ2p22lzGRjguqzT4O7BFMVH+OHz9i:9VR5Auv1bhQGt0PqzT4+BO+OHhi
TLSH
8611C883DB3824A6E9B388F4515EF083A3D85376C3212FD14C14BD0A2C7A1E997A50C0
3 malicious · 3 files
ZIP18da09a32cdd3b8c95524732117ca975T1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKDOC-YKBT12.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
arc:zip>lnk~T1059.003~T1202~T1204.002
Shape
arc:zip>lnk
malicious
2 nodes
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential3 malicious · 3 files
ZIP18da09a32cdd3b8c95524732117ca975T1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKDOC-YKBT12.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
No malware configuration was found at this point.
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
18da09a32cdd3b8c95524732117ca975 › DOC-YKBT12.lnk
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with EssentialSign in or create a free account to view the matching YARA rules.
Create a free account