Malicious
Malicious

3ba6b2d59ce40b11991b339a59528df0

ZIP Archive
MD5: 3ba6b2d59ce40b11991b339a59528df0
Size: 996 B
application/zip
Ctrl + scroll to zoom · drag to pan

This sample is a 996 bytes ZIP Archive classified as malicious by Malva.RE (lolbin). Static analysis extracted 2 embedded or derived files. It matches 1 YARA rule. Observed behaviours map to MITRE ATT&CK T1059.003, T1202: INDIRECT COMMAND EXECUTION and T1204.002. The file was analysed statically: it was parsed and decompiled, never executed.

SHA256
70e96214d5b83489ff89484878b57028c158390bb9de99d2f4ed6b8142648a5a
MD5
3ba6b2d59ce40b11991b339a59528df0
Verdict
Malicious
File type
ZIP Archive · 996 bytes
Category
LOLBin

Cite this report: https://app.malva.re/sha256/70e96214d5b83489ff89484878b57028c158390bb9de99d2f4ed6b8142648a5a

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential

File
Type
ZIP archive
Size
996 B · 996 B
First seen
2026-08-03 13:32 · 2 months ago
Last seen
2026-08-03 13:32 · 2 months ago
Last analysis
2026-08-03 13:32 · 2 months ago
Hashes
MD5 3ba6b2d59ce40b11991b339a59528df0 Sha1 a25df07b32c82fff5a29acfe57fa26c43043d9dc Sha256 70e96214d5b83489ff89484878b57028c158390bb9de99d2f4ed6b8142648a5a Sha384 bc9c3af75d506cf296d68ab6f291e0d6cca3e39559abb5b0e2ac0d917d6b6f9356425ee3f3a2295910a8a772aead2e36 Sha512 4a5ab8cb0df3aeb512e6537a6c2c7b470e7c2ec3217bdf5249bb594bdbc07d30a5d31ecf151427ebce5963f8fd70f23da02884602f914d91c57b25bf19739e10 SSDeep 24:9Sfi7ZQqLPjsAN80xvRH4sPqUUhWG6xbMrJuOvAxH4/LQJO2:9U2vjfSYvRH4sPLqWG++uiAxH4/yO2 TLSH 3C1108D68A80F612C029153BBFACCA8FC2308193242433E336A82F1C90FF939E40124A

3 malicious · 3 files
ZIP3ba6b2d59ce40b11991b339a59528df0LOLBin
LNKDOC-FBWH1J.lnkLOLBin
BIN[Lnk Summary]
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
Path arc:zip>lnk~T1059.003~T1202~T1204.002
Shape arc:zip>lnk
malicious 2 nodes

LNK: Command Execution UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential

3 malicious · 3 files
ZIP3ba6b2d59ce40b11991b339a59528df0LOLBin
LNKDOC-FBWH1J.lnkLOLBin
BIN[Lnk Summary]
No malware configuration was found at this point.

LNK: Command Execution UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
3ba6b2d59ce40b11991b339a59528df0 › DOC-FBWH1J.lnk
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential
Sign in or create a free account to view the matching YARA rules. Create a free account
An error has occurred. This application may no longer respond until reloaded. Reload 🗙