Malicious
253aaa8ab49a0adc04104f959c273a14
ZIP Archive
MD5: 253aaa8ab49a0adc04104f959c273a14
Size: 595 B
application/zip
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
ZIP archive
Size
595 B · 595 B
First seen
2026-08-03 12:38 · 2 months ago
Last seen
2026-08-03 12:38 · 2 months ago
Last analysis
2026-08-03 12:38 · 2 months ago
Hashes
MD5
253aaa8ab49a0adc04104f959c273a14
Sha1
c478ae2af422e8c4f68e28de04f140528e54b897
Sha256
9eb5f77b4010dc10487c81e96e6dcdef867b587e6f7e6d49d7edc7a729fbe06f
Sha384
a8f99e0e41c005d7f97937c439bded41d783731d04847e63d1346f26dee1c3ab1670c255c4911b758554ec7d320a6c18
Sha512
4d91f81176e2159a76e163c5c0aa53e2083bc4a7ab11f19554f242478f46e0a25e1fb2718aebd4ccfb4e68c162dc40d9847af159091853550214291249fb2563
SSDeep
12:5jx7M4pshmmeImD/HIqjjlQkEzgl25LQ8GDNsPxUFspnGE9IC/yhPuVOz5aoO:9x7M4+hjeBD/hjjl7l+QPsPxVEUAhIOa
TLSH
12F047F38A482011D7445DB4E38F33CB90103CD9362FF7434063D421BB5C26866145A5
3 malicious · 3 files
ZIP253aaa8ab49a0adc04104f959c273a14T1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKDOC-6LVNWA.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
arc:zip>lnk~T1059.003~T1202~T1204.002
Shape
arc:zip>lnk
malicious
2 nodes
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential3 malicious · 3 files
ZIP253aaa8ab49a0adc04104f959c273a14T1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKDOC-6LVNWA.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
No malware configuration was found at this point.
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
253aaa8ab49a0adc04104f959c273a14 › DOC-6LVNWA.lnk
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with EssentialSign in or create a free account to view the matching YARA rules.
Create a free account