Malicious
1f5a67cd53dc47b7b7af2a23708e5658
ZIP Archive
MD5: 1f5a67cd53dc47b7b7af2a23708e5658
Size: 592 B
application/zip
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
ZIP archive
Size
592 B · 592 B
First seen
2026-08-03 12:06 · 2 months ago
Last seen
2026-08-03 12:06 · 2 months ago
Last analysis
2026-08-03 12:06 · 2 months ago
Hashes
MD5
1f5a67cd53dc47b7b7af2a23708e5658
Sha1
dfca88674a4ddac799479e7cae842a6f1fe8e339
Sha256
0a36814ab6954e6fa3f3aca559d28b5951bc2dfd4ee65abaf307ac1c118f01c7
Sha384
fad2935b92b49ef713cb3c3d52e45a96ec0b62c194b4b80d5d6176f99848f64ad4ecd30766209115b701ef86dfb531e4
Sha512
6ccb21c3bd1f92667795fb3d6538d817a7b15dc46d6dfdbcf4879c18bfb6a4a8dc36ef3e498155323e61fa543f2ed15ac9f0fa69f29f4bfbf3fba24ef49412e7
SSDeep
12:5j2qzhMGsIXOHuBA4aQFGuEDpUWTjOajTnfwO6+ztwq2hMGcaBX:9ziFI/1HFyOCjvjji+ztlXo
TLSH
E6F041E0BC15B884D9905BFCC49AB601009BEA558F973E8AFD0A247D221124A011A510
3 malicious · 3 files
ZIP1f5a67cd53dc47b7b7af2a23708e5658T1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKDOCpdf2107-TFKR04.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
arc:zip>lnk~T1059.003~T1202~T1204.002
Shape
arc:zip>lnk
malicious
2 nodes
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential3 malicious · 3 files
ZIP1f5a67cd53dc47b7b7af2a23708e5658T1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKDOCpdf2107-TFKR04.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
No malware configuration was found at this point.
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
1f5a67cd53dc47b7b7af2a23708e5658 › DOCpdf2107-TFKR04.lnk
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with EssentialSign in or create a free account to view the matching YARA rules.
Create a free account