Malicious
Malicious

32da70ff695a9254b42df36a0fb7e961

ZIP Archive
MD5: 32da70ff695a9254b42df36a0fb7e961
Size: 978 B
application/zip

This sample is a 978 bytes ZIP Archive for which Malva.RE's static analysis did not establish a malicious verdict. Static analysis extracted 2 embedded or derived files. It matches 1 YARA rule. Observed behaviours map to MITRE ATT&CK T1059.003, T1202: INDIRECT COMMAND EXECUTION and T1204.002. The file was analysed statically: it was parsed and decompiled, never executed.

SHA256
6cec63dfdf4e53a4fa931351c8dce6db3e2933ae58f7667ab016878ed885a500
MD5
32da70ff695a9254b42df36a0fb7e961
Verdict
Malicious
File type
ZIP Archive · 978 bytes
Category
LOLBin

Cite this report: https://app.malva.re/sha256/6cec63dfdf4e53a4fa931351c8dce6db3e2933ae58f7667ab016878ed885a500

Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential

File
Type
ZIP archive
Size
978 B · 978 B
First seen
2026-08-03 13:38 · 2 months ago
Last seen
2026-08-03 13:38 · 2 months ago
Last analysis
2026-08-03 13:38 · 2 months ago
Hashes
MD5 32da70ff695a9254b42df36a0fb7e961 Sha1 7e094a611df19a00cc8946b9403660fa33478f3d Sha256 6cec63dfdf4e53a4fa931351c8dce6db3e2933ae58f7667ab016878ed885a500 Sha384 f7b5cff1f59669eb936fb88e8514454d916e27a09915bb5d9558c5107bb47938b1bad73c0e45f9aebc5c21ff0f16c7a4 Sha512 8206355b0cd923aa003b3bf082bf74fd821a188852c2c94942dc9d054aa750c5aec27c0ade688406aa0f0a705f329afc1994744e338080553dd61c3a26d8b2e5 SSDeep 24:9c96txeZoezhqpDEdg28x/N+nc0a8iajUQOd9xSf6tj+69XC8:9c96t8bQ9EVZcBbrxzj+69S8 TLSH FC1194B5B949468BC09353366A457DC502266E432817FE4FDC2C96CF4611E5B4AA88B0

3 malicious · 3 files
ZIP32da70ff695a9254b42df36a0fb7e961LOLBin
LNKDOC-MJB591.lnkLOLBin
BIN[Lnk Summary]
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
Path arc:zip>lnk~T1059.003~T1202~T1204.002
Shape arc:zip>lnk
malicious 2 nodes

LNK: Command Execution UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential

3 malicious · 3 files
ZIP32da70ff695a9254b42df36a0fb7e961LOLBin
LNKDOC-MJB591.lnkLOLBin
BIN[Lnk Summary]
No malware configuration was found at this point.

LNK: Command Execution UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
32da70ff695a9254b42df36a0fb7e961 › DOC-MJB591.lnk
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential
Sign in or create a free account to view the matching YARA rules. Create a free account
An error has occurred. This application may no longer respond until reloaded. Reload 🗙