Malicious
ZIP Archive
MD5: 28ba030f759030f4705e5bf5cce313ce
Size: 810 B
application/zip
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
ZIP archive
Size
810 B · 810 B
First seen
2026-08-03 11:26 · 2 months ago
Last seen
2026-08-03 11:26 · 2 months ago
Last analysis
2026-08-03 11:26 · 2 months ago
Hashes
MD5
28ba030f759030f4705e5bf5cce313ce
Sha1
72f43115da6b116ea154c1aee8d85a489143a39c
Sha256
00ed040f7f49d243db90391a21caf0c1ab94bc32f272d0e61affc8a33d31e2ed
Sha384
1ea3023ad43269994ae559834d6f9a2c457462b0f47979cba786a22ed2560b95bded59b43388416bdb6bacbd64623139
Sha512
629266b7b3bae7c75ca846091e82c867ba08751f6ab06ec668168c5f25148da7e60a16d276c6d013260e5495fcf23685416b8b6aa2e942397e44ff5d52abd531
SSDeep
24:9KS8Goux6SohwTnILJAixQuBmDTaxZYWV:9KRyewTnILJrx9UiZYWV
TLSH
34014161E7910A1AD21A52B050490D9169EF81A08A4B3A5BF4BDEA8FBD32DC09E334D1
3 malicious · 3 files
ZIP28ba030f759030f4705e5bf5cce313ceT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKDOC-QNBCL7.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
arc:zip>lnk~T1059.003~T1202~T1204.002
Shape
arc:zip>lnk
malicious
2 nodes
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential