Malicious
1989f8abacb359029f63d9904b1bed70
ZIP Archive
MD5: 1989f8abacb359029f63d9904b1bed70
Size: 939 B
application/zip
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
ZIP archive
Size
939 B · 939 B
First seen
2026-08-04 07:45 · 2 months ago
Last seen
2026-08-04 07:45 · 2 months ago
Last analysis
2026-08-04 07:45 · 2 months ago
Hashes
MD5
1989f8abacb359029f63d9904b1bed70
Sha1
1fb4bbce422ad0741eab43a1e6469b856c195407
Sha256
04e3b5895bde4146d4977c38051f53c9c27dfc0f7f9839ffaf20215880245352
Sha384
5cea2a074017276642e99228d3df10e5ccddb8302ee8b0bbc56092ba0afde54d00d38119081d60ed1205b9e7d383fa2b
Sha512
b94099f9625fe006e0b5cd5dbfb19cddbd70ca7eadbe636237a2403576e06844003bd6aad3b6f13e583fcfcd4587bd55cfb0e978fd19c4857dba80ed7aa23f7f
SSDeep
24:92Er3P0fBDVtYVEdqpU2pznvZmimzypFZrz1HS/zugY2P/:92G09mU2pznBnzNzJSTY2P/
TLSH
6A1184678E609F6CC00E2978A83B0396C53A5A16040EA1661269944A9EB13524DF6BA7
3 malicious · 3 files
ZIP1989f8abacb359029f63d9904b1bed70T1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKDOC-ZYRDWD.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
arc:zip>lnk~T1059.003~T1202~T1204.002
Shape
arc:zip>lnk
malicious
2 nodes
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential3 malicious · 3 files
ZIP1989f8abacb359029f63d9904b1bed70T1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKDOC-ZYRDWD.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
No malware configuration was found at this point.
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
1989f8abacb359029f63d9904b1bed70 › DOC-ZYRDWD.lnk
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with EssentialSign in or create a free account to view the matching YARA rules.
Create a free account