Malicious
1f325375e43142eae9214210fc734cdb
ZIP Archive
MD5: 1f325375e43142eae9214210fc734cdb
Size: 987 B
application/zip
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
ZIP archive
Size
987 B · 987 B
First seen
2026-08-03 13:34 · 2 months ago
Last seen
2026-08-03 13:34 · 2 months ago
Last analysis
2026-08-03 13:34 · 2 months ago
Hashes
MD5
1f325375e43142eae9214210fc734cdb
Sha1
dc287bf3cc022cc0fc66874930d9b16a3a53914a
Sha256
8891206944b5b56c1d489e502efed2798a6892c377b1395978cf1ffa1ee63a2a
Sha384
f4e853faab5eb8f7399f5ce4f237d988c7e8e63e72d11b99fa99fe65d550f75772f7fc7318eabfa42fda89ecdeef1111
Sha512
368d7e73c08c223662f6d144b3478cf33d09245f113f77e93ba726cdf9438e5f6b9f4976c4fb58c4ca83ff38204d119bb34d80125b26d1aa9b89a925161fc195
SSDeep
24:994+lo9tLrTY/HSRuCglSqYGIiza1QutR0zqox0d7qZzZYGWfP4++o9If/:9a+lo9NTYaRpNwzmraXxNZz21A++o9I3
TLSH
431108652F4F1104F359C0BCE41D8C1CB2B4B782C18D0E964CB9FC5AA5997E9BE469C4
3 malicious · 3 files
ZIP1f325375e43142eae9214210fc734cdbT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKDOC-OTK36M.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
arc:zip>lnk~T1059.003~T1202~T1204.002
Shape
arc:zip>lnk
malicious
2 nodes
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential3 malicious · 3 files
ZIP1f325375e43142eae9214210fc734cdbT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKDOC-OTK36M.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
No malware configuration was found at this point.
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
1f325375e43142eae9214210fc734cdb › DOC-OTK36M.lnk
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with EssentialSign in or create a free account to view the matching YARA rules.
Create a free account