Malicious
39df31e8591f7e5a173bf81271658cc9
ZIP Archive
MD5: 39df31e8591f7e5a173bf81271658cc9
Size: 806 B
application/zip
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
ZIP archive
Size
806 B · 806 B
First seen
2026-08-04 08:32 · 2 months ago
Last seen
2026-08-04 08:32 · 2 months ago
Last analysis
2026-08-04 08:32 · 2 months ago
Hashes
MD5
39df31e8591f7e5a173bf81271658cc9
Sha1
f091d93d61a3243f1940504a0e1b5226f5067a9f
Sha256
b092b0ad4f81ea63d0e12c46e9ea3726c0885a27a534c398676e05cfae7b8595
Sha384
b2df9c3ff36ab01e225fdd543fdf9e7a8db85b444e14ec0501f40b9bece67cdc77117f7f566bf798a18497621e84ea45
Sha512
13c27458821c37f5d61df579f3fea75eccbdec62a30672300313ca1d3544b7d994f029df9f99d9dbd03375fe1216dfef84b6a18051ecdc9166ee0936b713ef7e
SSDeep
24:9C05ZSxAPNC4N5ivsFqNEv6dn+oq01UKDoeHgdx:9CxqPQ4NcvkqEvVoqMDskgdx
TLSH
270175C981FE150FF49BCC3EE6A6395AB9176009B28C802D5BECD4497CA0A9BA579400
3 malicious · 3 files
ZIP39df31e8591f7e5a173bf81271658cc9T1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKDOC-IRSAGB.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
arc:zip>lnk~T1059.003~T1202~T1204.002
Shape
arc:zip>lnk
malicious
2 nodes
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential3 malicious · 3 files
ZIP39df31e8591f7e5a173bf81271658cc9T1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKDOC-IRSAGB.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
No malware configuration was found at this point.
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
39df31e8591f7e5a173bf81271658cc9 › DOC-IRSAGB.lnk
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with EssentialSign in or create a free account to view the matching YARA rules.
Create a free account