Malicious
309e80cc58e3e5843ab02e4020b1a1d9
ZIP Archive
MD5: 309e80cc58e3e5843ab02e4020b1a1d9
Size: 582 B
application/zip
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
ZIP archive
Size
582 B · 582 B
First seen
2026-08-03 13:41 · 2 months ago
Last seen
2026-08-03 13:41 · 2 months ago
Last analysis
2026-08-03 13:41 · 2 months ago
Hashes
MD5
309e80cc58e3e5843ab02e4020b1a1d9
Sha1
1e54708c01f688fa228e3dd355fba7e8393af2d9
Sha256
1838b29ece73da9495629b4348a7a9ba0d7ac8a6c7eaca9a9be5a5331279dfc5
Sha384
854fd2826b7549b32d2042d6ebb354b6f5dda812f1651a14d7c6e343dfcad2de79a7235a828e97138804fa1c3d644e8a
Sha512
aa572e551dd2cf7cd8e5d590e0192623b6c5532e558ebd08272460600c20b14b4940e64e2c6497f02a68ab90c50d76de05df14244323abc550c60ec7c166e542
SSDeep
12:5jeollFcE4daoXT3YEBaAIadAQfP2aOIf8G+tNX2L3qay/B0ollGcVaoi:9eo/h4daC7YEBpIaofX2L3qay/B0o/fi
TLSH
45F026870818C706C1D080780C7A737E751DCE43A01D5E9BA73AF5516E1BFE83E49981
3 malicious · 3 files
ZIP309e80cc58e3e5843ab02e4020b1a1d9T1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKDOC-S8TUG8.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
arc:zip>lnk~T1059.003~T1202~T1204.002
Shape
arc:zip>lnk
malicious
2 nodes
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential3 malicious · 3 files
ZIP309e80cc58e3e5843ab02e4020b1a1d9T1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKDOC-S8TUG8.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
No malware configuration was found at this point.
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
309e80cc58e3e5843ab02e4020b1a1d9 › DOC-S8TUG8.lnk
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with EssentialSign in or create a free account to view the matching YARA rules.
Create a free account