Malicious
22a0da4a8fb313ef3f56aa1807f4d2b2
ZIP Archive
MD5: 22a0da4a8fb313ef3f56aa1807f4d2b2
Size: 579 B
application/zip
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
ZIP archive
Size
579 B · 579 B
First seen
2026-08-03 11:23 · 2 months ago
Last seen
2026-08-03 11:23 · 2 months ago
Last analysis
2026-08-03 11:23 · 2 months ago
Hashes
MD5
22a0da4a8fb313ef3f56aa1807f4d2b2
Sha1
5471068acb79e46459a55e507b2e7ffa1e94d984
Sha256
ba8ab0b9018b3e6b5a8ab74096f94e156623f341e61342f05d6e2278d61a97c7
Sha384
6f51e76573eed046a53ec6e70674ed0342384dabec15b5690f4c4c9970feaf32772b3707e2c101358b62e6f51720441b
Sha512
cbdc24d3933964920448c62660b2a55b1ddedb2c58241a6b052e0f257a44c10d85512b6de43a48427d621ff41e3c5f10bf716dc03b2f790330a375c6cc399e29
SSDeep
12:5jwYlACYz/xdJ9FTDCbQjK1GuorO0gH04wqWI1NrBgFpDjuZeOQ7mBCYlAwaoF/:9vlACYddvFT+bQOkuqYDHWIFgPjuZJES
TLSH
AFF026B341A0C13DE193FFFFD0726EC5BC3E004010081A01FA55A97CD94A4F25DBA0A1
3 malicious · 3 files
ZIP22a0da4a8fb313ef3f56aa1807f4d2b2T1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKDOC-VBFN6D.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
arc:zip>lnk~T1059.003~T1202~T1204.002
Shape
arc:zip>lnk
malicious
2 nodes
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential3 malicious · 3 files
ZIP22a0da4a8fb313ef3f56aa1807f4d2b2T1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKDOC-VBFN6D.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
No malware configuration was found at this point.
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
22a0da4a8fb313ef3f56aa1807f4d2b2 › DOC-VBFN6D.lnk
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with EssentialSign in or create a free account to view the matching YARA rules.
Create a free account