Malicious
ZIP Archive
MD5: 29a67873455de0c66298469a4a332d9a
Size: 587 B
application/zip
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
ZIP archive
Size
587 B · 587 B
First seen
2026-08-04 08:34 · 2 months ago
Last seen
2026-08-04 08:34 · 2 months ago
Last analysis
2026-08-04 08:34 · 2 months ago
Hashes
MD5
29a67873455de0c66298469a4a332d9a
Sha1
fe88c688879916d87db1fdd0da9a39d4c075bf72
Sha256
13ce6df5ef15b9bcfe49fad7e3ae727a52759a71ff30a0daeb86f3f98f9071a9
Sha384
a4438c084b512e3acb4187b140a6c953ae1125dfe4193f0b5d2dedda02d3685bc0a79cccb8669bcd4a04c4ab9544479c
Sha512
e1d52b8b41ecd70c4142d1b506acc11a9a3a23084e2ea479fd419cfbfde36cad79b29803eee8054a81064f5ba995f02f9706f2986a6b5355f31779445d39c9b7
SSDeep
12:5j3ok/PLJWRARWq1/5LAXjXQJM21LaonLya0/mL+p4CXDWYJok/SLJcaol:935LJaA95LMjXQJv1Lr7pG4CqYJ5QJIl
TLSH
77F096910352E20FC42553B42970FC2B03634EE43001EF33F38C6024F415847BA08CA5
3 malicious · 3 files
ZIP29a67873455de0c66298469a4a332d9aT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKDOC-NWMJ06.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
arc:zip>lnk~T1059.003~T1202~T1204.002
Shape
arc:zip>lnk
malicious
2 nodes
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential