Malicious
1a4f33ce4a4112f206b494f4d744dca3
ZIP Archive
MD5: 1a4f33ce4a4112f206b494f4d744dca3
Size: 584 B
application/zip
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
ZIP archive
Size
584 B · 584 B
First seen
2026-08-03 12:59 · 2 months ago
Last seen
2026-08-03 12:59 · 2 months ago
Last analysis
2026-08-03 12:59 · 2 months ago
Hashes
MD5
1a4f33ce4a4112f206b494f4d744dca3
Sha1
9886cb72ab207de9bad01820e01c816641acbd0f
Sha256
da24078289251e76b65f863869464882950e0e5dd8eeda35d3c166d066cb584b
Sha384
c020ef7fca7a93dc4d11c335e89d291c2596d19665eafa242eca55daa5d6322ff20376e1f337046134d6ae0555091332
Sha512
be02299d89d18d8704ff4e43ba803c2fec7fc1964e0c543920066882727209b266a09dd40505e310c36fb0ac621262adae4d1416e8f243653d6b1962cd0f9add
SSDeep
12:5jiWDgsqpeg8Xovh2wADJAcZIt6eHGd8DenwE1IwQaoo:9mTpe9X82wOJva6eC8DwHIJo
TLSH
2EF096BB98523540C283FC3C11E294842205C0A2B9BDFD43B24CF41D836DCE1A64CCC4
3 malicious · 3 files
ZIP1a4f33ce4a4112f206b494f4d744dca3T1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKDOC-NCSU12.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
arc:zip>lnk~T1059.003~T1202~T1204.002
Shape
arc:zip>lnk
malicious
2 nodes
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential3 malicious · 3 files
ZIP1a4f33ce4a4112f206b494f4d744dca3T1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKDOC-NCSU12.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
No malware configuration was found at this point.
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
1a4f33ce4a4112f206b494f4d744dca3 › DOC-NCSU12.lnk
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with EssentialSign in or create a free account to view the matching YARA rules.
Create a free account