Malicious
ZIP Archive
MD5: 2e829cf488a5e5d1af0f0be889544db7
Size: 584 B
application/zip
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
ZIP archive
Size
584 B · 584 B
First seen
2026-08-03 12:12 · 2 months ago
Last seen
2026-08-03 12:12 · 2 months ago
Last analysis
2026-08-03 12:12 · 2 months ago
Hashes
MD5
2e829cf488a5e5d1af0f0be889544db7
Sha1
52a546a4cc3d95f9f75451dcf4a25df4eeb77f69
Sha256
394dcf59524a283dbf278201c12aae761a9a4a710bf7575a58b02897382656c4
Sha384
aff7fabbad59e4d4f706c83ddd486a3a02736796f5d040220d057cceb862c410b564d0b709aad8166c5efd9c38a9f6e4
Sha512
63848c9c98199d6e4eb166d0a6e1a6b4c58f949c8299fe3ff476dcd6e3f1649824b64e3ebecbfb221b283c842daac28a400b98fa9c65b474369b482d935287fd
SSDeep
12:5jO+rjGKJ825m2f/fuqP5SUhCqMoaGHv4CB/BU2HrAvDI7GRngyKIXDaZ:9OqjHu4HnIoa+4G9MtnKIs
TLSH
4CF041B4E912A02EC512C0FB6199316D423A4268F30F24370211E4040C534538FD68C0
3 malicious · 3 files
ZIP2e829cf488a5e5d1af0f0be889544db7T1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKPDFDOC-3WLI0Y.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
arc:zip>lnk~T1059.003~T1202~T1204.002
Shape
arc:zip>lnk
malicious
2 nodes
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential