Malicious
31911832cab470d2c67de41f574df10b
ZIP Archive
MD5: 31911832cab470d2c67de41f574df10b
Size: 582 B
application/zip
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
ZIP archive
Size
582 B · 582 B
First seen
2026-08-03 11:05 · 2 months ago
Last seen
2026-08-03 11:05 · 2 months ago
Last analysis
2026-08-03 11:05 · 2 months ago
Hashes
MD5
31911832cab470d2c67de41f574df10b
Sha1
0db0258bf963806534eef33f6b67d03b89fe2a0c
Sha256
71d401c6a7398beaa2d5c754f98ca061cbf21d7b3664131b432c9d1f214705c9
Sha384
0f3c1552685410ccd94ff8ced3eab44e424bc91455cf61c4973c6dc3ff55f1f00b558f2b522d88f2313e3d9e1d0595cb
Sha512
d073697f50841a3db1de1f8f7e278180186881724d077bf5ca1886b50e7bdac4ca826e5965ec467dc9b0e464cf0cb6ee69db60d7d38f7a333d46af75fc9ce9ba
SSDeep
12:5jehLxJISKH6hCuPeN7D5d67TgwgNrzlDV3xfSeyZh6B3hLviaoi:9q7IahXmN7ldN8eyZh6Bxei
TLSH
8EF0E1A49A59E8BED456D03D2453B30DE094606789675F9E62149C095C358D086818CE
3 malicious · 3 files
ZIP31911832cab470d2c67de41f574df10bT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKDOC-SS596W.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
arc:zip>lnk~T1059.003~T1202~T1204.002
Shape
arc:zip>lnk
malicious
2 nodes
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential3 malicious · 3 files
ZIP31911832cab470d2c67de41f574df10bT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKDOC-SS596W.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
No malware configuration was found at this point.
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
31911832cab470d2c67de41f574df10b › DOC-SS596W.lnk
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with EssentialSign in or create a free account to view the matching YARA rules.
Create a free account