Malicious
3b96b13ffbe34185ccd011aa558f8f09
ZIP Archive
MD5: 3b96b13ffbe34185ccd011aa558f8f09
Size: 585 B
application/zip
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
ZIP archive
Size
585 B · 585 B
First seen
2026-08-03 10:48 · 2 months ago
Last seen
2026-08-03 10:48 · 2 months ago
Last analysis
2026-08-03 10:48 · 2 months ago
Hashes
MD5
3b96b13ffbe34185ccd011aa558f8f09
Sha1
bcff300a88df7f19fdd8774901bd1a5cbbef9fc7
Sha256
c10831628c9da44da9b71a3c7f086fb7abd1343c2ee1dcd1e2a5322e0e7455e4
Sha384
79582a858d3017a22a57e6ff25c6737e6b8bd7d2bee4dfdb694d7b9def75a34f0a7666db382dbd06f68e132cfb25fd43
Sha512
08e1968619a27a537c7b7d43f4ee5bb723cf3d4ef8d4db921e501f2af792b9fd5b88757279a6677b0a3c05880e8a430445a0361c76e852e188d869af73680309
SSDeep
12:5jYbbFBCF2oG5AmigjBTltEbTwJz0ttw2M/KgR9921SZFWI/B07qbGbiaoH:9axBNonnIBTltEbTsz0ttwlKy9PSI/B3
TLSH
D6F041E2042FC08DE433D0B8E8C23A3485582004832ED3820258E87F9F406BE5C8DF70
3 malicious · 3 files
ZIP3b96b13ffbe34185ccd011aa558f8f09T1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKDOC-9IRICU.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
arc:zip>lnk~T1059.003~T1202~T1204.002
Shape
arc:zip>lnk
malicious
2 nodes
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential3 malicious · 3 files
ZIP3b96b13ffbe34185ccd011aa558f8f09T1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKDOC-9IRICU.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
No malware configuration was found at this point.
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
3b96b13ffbe34185ccd011aa558f8f09 › DOC-9IRICU.lnk
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with EssentialSign in or create a free account to view the matching YARA rules.
Create a free account