Malicious
ZIP Archive
MD5: 1aeb9058ee308292b4354817d36f5a6c
Size: 590 B
application/zip
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
ZIP archive
Size
590 B · 590 B
First seen
2026-08-03 11:22 · 2 months ago
Last seen
2026-08-03 11:22 · 2 months ago
Last analysis
2026-08-03 11:22 · 2 months ago
Hashes
MD5
1aeb9058ee308292b4354817d36f5a6c
Sha1
5934fee468bf037a1364222839549d8c9cdd5190
Sha256
eb89b4797fcb2cae9f13f3b2d21ee92a3b818ddeb3ecc691a7d372474ecb8a49
Sha384
d3048d790f0c74a5793956930f83c8d817f134457968c2bef5afc6b91bb573fb5af2b0d03a9a108c612ab10b7f89c09d
Sha512
f08340c0c9540ae9c9f96635b2380f9b5aa2f7d513b1152cdcac30ca00d550b46bbac0840f92eccf154d8813b829049c2487788bf73401d01b6c767392717c28
SSDeep
12:5jqt1Xm9Si3dCeejfDOXvUQWUh9X05NJ57deQpAwehZBYeeao6:9ag9h6fDOXv7WO9XwhDeh/zO6
TLSH
FCF0E1364A0A5026CA5085B10884A2BD9D052107F50715CBBBB4D8C53D6D75EE952862
3 malicious · 3 files
ZIP1aeb9058ee308292b4354817d36f5a6cT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKDOC-R2YBL2.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
arc:zip>lnk~T1059.003~T1202~T1204.002
Shape
arc:zip>lnk
malicious
2 nodes
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential