Malicious
Malicious

3e8a1b5533b8be04031ffadce2e8851b

ZIP Archive
MD5: 3e8a1b5533b8be04031ffadce2e8851b
Size: 587 B
application/zip

This sample is a 587 bytes ZIP Archive for which Malva.RE's static analysis did not establish a malicious verdict. Static analysis extracted 2 embedded or derived files. It matches 1 YARA rule. Observed behaviours map to MITRE ATT&CK T1059.003, T1202: INDIRECT COMMAND EXECUTION and T1204.002. The file was analysed statically: it was parsed and decompiled, never executed.

SHA256
b6cb4c749a434be11b6d8f709003ad588850e3d51252db43442e4c5a84144e77
MD5
3e8a1b5533b8be04031ffadce2e8851b
Verdict
Malicious
File type
ZIP Archive · 587 bytes
Category
LOLBin

Cite this report: https://app.malva.re/sha256/b6cb4c749a434be11b6d8f709003ad588850e3d51252db43442e4c5a84144e77

Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential

File
Type
ZIP archive
Size
587 B · 587 B
First seen
2026-08-03 11:01 · 2 months ago
Last seen
2026-08-03 11:01 · 2 months ago
Last analysis
2026-08-03 11:01 · 2 months ago
Hashes
MD5 3e8a1b5533b8be04031ffadce2e8851b Sha1 2c4f5c1bce4a422d312c85dedc1485c3fec3167c Sha256 b6cb4c749a434be11b6d8f709003ad588850e3d51252db43442e4c5a84144e77 Sha384 4efe40a36facd192d5130f3ad166e4530458f8a14dc5db04a9ca1ed84f6b72eac9e971059a47ed2861fda53f0fb1a7dd Sha512 6c6ed941249f2bd20fbaf042104575f9f71d27e8f18a7afecddf640a332956bc7bfd2ce7ddaa3f57e124503a7004b7bff4cc4f84a5e12d976832049ea4befc89 SSDeep 12:5jktNjIAqgGiCwY8+wb0u9gC+gcMJ6lEk4IfpmcTGwaX4qNaol:9uNjhqIuUN362Wgo2oSl TLSH 03F0E1A792AA916EC106B53FD89D346F81308DC0C1566DBF2FDAD9CCD5D93498343448

3 malicious · 3 files
ZIP3e8a1b5533b8be04031ffadce2e8851bLOLBin
LNKDOC-76CB9H.lnkLOLBin
BIN[Lnk Summary]
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
Path arc:zip>lnk~T1059.003~T1202~T1204.002
Shape arc:zip>lnk
malicious 2 nodes

LNK: Command Execution UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential

3 malicious · 3 files
ZIP3e8a1b5533b8be04031ffadce2e8851bLOLBin
LNKDOC-76CB9H.lnkLOLBin
BIN[Lnk Summary]
No malware configuration was found at this point.

LNK: Command Execution UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
3e8a1b5533b8be04031ffadce2e8851b › DOC-76CB9H.lnk
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential
Sign in or create a free account to view the matching YARA rules. Create a free account
An error has occurred. This application may no longer respond until reloaded. Reload 🗙