Malicious
221b7ad58b5646a31ab90e8944217105
ZIP Archive
MD5: 221b7ad58b5646a31ab90e8944217105
Size: 590 B
application/zip
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
ZIP archive
Size
590 B · 590 B
First seen
2026-08-04 08:26 · 2 months ago
Last seen
2026-08-04 08:26 · 2 months ago
Last analysis
2026-08-04 08:26 · 2 months ago
Hashes
MD5
221b7ad58b5646a31ab90e8944217105
Sha1
4dae1a25a65d2e70fc61d1602fd479acd40c4d4a
Sha256
251c8875e608b6669ce59b2cdb057e2bbf911645a3e46ca2f52ca69afcd24dca
Sha384
5e705b65251e74ce4cc657fdcfb7a6f87e44d3b175924a470a539223f4ddf5c5afbe6684a06139459c4c99750cc77803
Sha512
a93e3c639b1239375168cbd54ed334185f7c50e96f5f4c7ac3210419bb9baf06afe4e2262aa477d7b1758bdcb47667373f4a6b18e9739d269e278a778e711115
SSDeep
12:5j9lGUaHFWbHcRtPAV/2CGhOpGEcJDJ9rwUl/X4MNb0hvycao6:99l3yM7cvPw/lwIGVJD8Ul/I+b0JyI6
TLSH
B5F096B9C3008005CE00CDF6A28472C207B49F1B40CA9B4321F5C80ACC27AF23A96D96
3 malicious · 3 files
ZIP221b7ad58b5646a31ab90e8944217105T1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKDOC-VTONFM.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
arc:zip>lnk~T1059.003~T1202~T1204.002
Shape
arc:zip>lnk
malicious
2 nodes
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential3 malicious · 3 files
ZIP221b7ad58b5646a31ab90e8944217105T1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKDOC-VTONFM.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
No malware configuration was found at this point.
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
221b7ad58b5646a31ab90e8944217105 › DOC-VTONFM.lnk
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with EssentialSign in or create a free account to view the matching YARA rules.
Create a free account