Malicious
Malicious

30a1b5411cb0e98598c938fb09b661b2

ZIP Archive
MD5: 30a1b5411cb0e98598c938fb09b661b2
Size: 955 B
application/zip

This sample is a 955 bytes ZIP Archive for which Malva.RE's static analysis did not establish a malicious verdict. Static analysis extracted 2 embedded or derived files. It matches 1 YARA rule. Observed behaviours map to MITRE ATT&CK T1059.003, T1202: INDIRECT COMMAND EXECUTION and T1204.002. The file was analysed statically: it was parsed and decompiled, never executed.

SHA256
954ec61e6a65a2a685af6dbb639edd402a97e847dd1da0367a35a9dc70739748
MD5
30a1b5411cb0e98598c938fb09b661b2
Verdict
Malicious
File type
ZIP Archive · 955 bytes
Category
LOLBin

Cite this report: https://app.malva.re/sha256/954ec61e6a65a2a685af6dbb639edd402a97e847dd1da0367a35a9dc70739748

Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential

File
Type
ZIP archive
Size
955 B · 955 B
First seen
2026-08-04 07:45 · 2 months ago
Last seen
2026-08-04 07:45 · 2 months ago
Last analysis
2026-08-04 07:45 · 2 months ago
Hashes
MD5 30a1b5411cb0e98598c938fb09b661b2 Sha1 ccbeb3b34a9d4bb6f1b183d629b9815fb4714a53 Sha256 954ec61e6a65a2a685af6dbb639edd402a97e847dd1da0367a35a9dc70739748 Sha384 8fe24e5c321fe400b1ddffe3b953c235739849011043756b6ff06caf5ea561f4784e1b8ef47e3c8a8b9a64c610c25817 Sha512 fa6a5de8e190d8b698ab02ac5eeb6836ab5ca979facb0b78181b31f072210dd91166d4151fded0dcbddc64ce4ad5e6b4bccb14bbdad58ea1289c46dd807e11a9 SSDeep 24:9VLYcwcpj4CAkKmjyRU0cQOSdMsoyrgaklktJ+3oXX:9VLYPcpj4FeBw5rgBW+3oXX TLSH 4C11845224269B8CED91443A35E3F46B43798714D07D340BA664B6002F896AAAA7AF70

3 malicious · 3 files
ZIP30a1b5411cb0e98598c938fb09b661b2LOLBin
LNKDOC-318TMW.lnkLOLBin
BIN[Lnk Summary]
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
Path arc:zip>lnk~T1059.003~T1202~T1204.002
Shape arc:zip>lnk
malicious 2 nodes

LNK: Command Execution UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential

3 malicious · 3 files
ZIP30a1b5411cb0e98598c938fb09b661b2LOLBin
LNKDOC-318TMW.lnkLOLBin
BIN[Lnk Summary]
No malware configuration was found at this point.

LNK: Command Execution UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
30a1b5411cb0e98598c938fb09b661b2 › DOC-318TMW.lnk
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential
Sign in or create a free account to view the matching YARA rules. Create a free account
An error has occurred. This application may no longer respond until reloaded. Reload 🗙