Malicious
Malicious

2c65f3c0395e50d6afbee33f5ff69173

ZIP Archive
MD5: 2c65f3c0395e50d6afbee33f5ff69173
Size: 951 B
application/zip

This sample is a 951 bytes ZIP Archive for which Malva.RE's static analysis did not establish a malicious verdict. Static analysis extracted 2 embedded or derived files. It matches 1 YARA rule. Observed behaviours map to MITRE ATT&CK T1059.003, T1202: INDIRECT COMMAND EXECUTION and T1204.002. The file was analysed statically: it was parsed and decompiled, never executed.

SHA256
a2530da6ce696e30743f5df32119ba3459b9c9168a0555c959c972687c97690d
MD5
2c65f3c0395e50d6afbee33f5ff69173
Verdict
Malicious
File type
ZIP Archive · 951 bytes
Category
LOLBin

Cite this report: https://app.malva.re/sha256/a2530da6ce696e30743f5df32119ba3459b9c9168a0555c959c972687c97690d

Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential

File
Type
ZIP archive
Size
951 B · 951 B
First seen
2026-08-03 10:55 · 2 months ago
Last seen
2026-08-03 10:55 · 2 months ago
Last analysis
2026-08-03 10:55 · 2 months ago
Hashes
MD5 2c65f3c0395e50d6afbee33f5ff69173 Sha1 7b1af44551fa18fff6538fe3ea107d8b4e382d75 Sha256 a2530da6ce696e30743f5df32119ba3459b9c9168a0555c959c972687c97690d Sha384 4b1f14e3aa31fb314d917e5938498147b35b7c9b936955c9cc91d68d2f053bc74f911e0f30618703a370c61ede2e838c Sha512 e4bb13a421fe212e7bd781aa91b8c381345cdc8fafb91c3d451482d9c1b33c4e9966a8c34110b81e1b615cb43fe403cc80929744ac8e7ddc1f18a90c5b850316 SSDeep 24:98XRN0iaSO8bU+9Tzth/1jVi6yxaHZ7BIz:98hDQYzT/K6pHZ7BIz TLSH 1F11F77E27D150EBC30D45B280933469F10030126393336B2A5E66C9BC782A8F7DF2A0

3 malicious · 3 files
ZIP2c65f3c0395e50d6afbee33f5ff69173LOLBin
LNKDOC-OW2ZWR.lnkLOLBin
BIN[Lnk Summary]
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
Path arc:zip>lnk~T1059.003~T1202~T1204.002
Shape arc:zip>lnk
malicious 2 nodes

LNK: Command Execution UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential

3 malicious · 3 files
ZIP2c65f3c0395e50d6afbee33f5ff69173LOLBin
LNKDOC-OW2ZWR.lnkLOLBin
BIN[Lnk Summary]
No malware configuration was found at this point.

LNK: Command Execution UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
2c65f3c0395e50d6afbee33f5ff69173 › DOC-OW2ZWR.lnk
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential
Sign in or create a free account to view the matching YARA rules. Create a free account
An error has occurred. This application may no longer respond until reloaded. Reload 🗙