Malicious
249244e50e568de613c8123771a6b077
ZIP Archive
MD5: 249244e50e568de613c8123771a6b077
Size: 584 B
application/zip
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
ZIP archive
Size
584 B · 584 B
First seen
2026-08-03 13:04 · 2 months ago
Last seen
2026-08-03 13:04 · 2 months ago
Last analysis
2026-08-03 13:04 · 2 months ago
Hashes
MD5
249244e50e568de613c8123771a6b077
Sha1
b3cb5509511a6a75e9407d4e4d2acb9b456587d2
Sha256
da78f739a75fc052ec1816e0dc41042f0db2d2fd983bdbbcd237b333e94641ef
Sha384
fbd8402eb4be617d9bc1281e86ad3bf5cc603ac2c80a101c5985181673483c1e5d09956818d3035a3bf103de4382b345
Sha512
116e4b0c38cfc35d76a88d8bd47c5e7d2e00835904ef700b5eb687bd476c9a46f523ebf6e931871c56769fbe455704c20313e67a3b1e54e19188dfefc07d912e
SSDeep
12:5jS62vgpwHCyJjk1r8cMPcJ1gOd+bdPECrWB1nR6Paoo:9Dlw1I1r8lPc1gOodMSWBF8Ro
TLSH
A7F0E154C9B0AC01DF93D8FD3AF037A75080EC23252D4A1D667482541D6D2C58BAE1B0
3 malicious · 3 files
ZIP249244e50e568de613c8123771a6b077T1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKDOC-DYGNLS.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
arc:zip>lnk~T1059.003~T1202~T1204.002
Shape
arc:zip>lnk
malicious
2 nodes
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential3 malicious · 3 files
ZIP249244e50e568de613c8123771a6b077T1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKDOC-DYGNLS.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
No malware configuration was found at this point.
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
249244e50e568de613c8123771a6b077 › DOC-DYGNLS.lnk
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with EssentialSign in or create a free account to view the matching YARA rules.
Create a free account