Malicious
1f47d5709bad54cc702fe34c1eabf417
ZIP Archive
MD5: 1f47d5709bad54cc702fe34c1eabf417
Size: 873 B
application/zip
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
ZIP archive
Size
873 B · 873 B
First seen
2026-08-03 13:39 · 2 months ago
Last seen
2026-08-03 13:39 · 2 months ago
Last analysis
2026-08-03 13:39 · 2 months ago
Hashes
MD5
1f47d5709bad54cc702fe34c1eabf417
Sha1
a97559c7bc8f3b32c1035465506208a84dbe32b4
Sha256
447922b336a7994c04cd791d9b3318c68f414be893a4a6cdcb5b56667761b33b
Sha384
9e5c4c8351dcb05cab4a296644ef8592d24d0bb9f26c20d33f275b2aea53e6052e69377bd4e1be8b3e5ad080927c56f8
Sha512
6ffc2914aa3cb98ccf73846cd028cf2e2ddfcd782fd951bfc3a5352eac46999c4127d71ba6666faca1a239d29d42f4b7122d3584c574b6037a0e6658be188a46
SSDeep
24:98t7ESz+VPh+VA7QLnQLH+qollYfUP47n4HUf9t2CVPaWjevt:9+Joh+DJrliMP4b4HU3NPaWqF
TLSH
3011D6E40AB8CC89C40D033295B60C664D1CD41071CFD73E0D2399B5ED380C89B83E6A
3 malicious · 3 files
ZIP1f47d5709bad54cc702fe34c1eabf417T1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKDOC-1J3XWR.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
arc:zip>lnk~T1059.003~T1202~T1204.002
Shape
arc:zip>lnk
malicious
2 nodes
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential3 malicious · 3 files
ZIP1f47d5709bad54cc702fe34c1eabf417T1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKDOC-1J3XWR.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
No malware configuration was found at this point.
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
1f47d5709bad54cc702fe34c1eabf417 › DOC-1J3XWR.lnk
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with EssentialSign in or create a free account to view the matching YARA rules.
Create a free account