Malicious
3f4894471b02f6d1b51a69927e8892e0
ZIP Archive
MD5: 3f4894471b02f6d1b51a69927e8892e0
Size: 582 B
application/zip
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
ZIP archive
Size
582 B · 582 B
First seen
2026-08-03 10:35 · 2 months ago
Last seen
2026-08-03 10:35 · 2 months ago
Last analysis
2026-08-03 10:35 · 2 months ago
Hashes
MD5
3f4894471b02f6d1b51a69927e8892e0
Sha1
3aac7226c2a950563f200bd9392223872145bfbb
Sha256
283fe3ba521ddb61180617fa0b93e62a682b32748a9b0ebdd37856888fe806d0
Sha384
3a7068ad482615b0e8abfe3c601ae2ea4d4327b7896c0f09d800c521cd83c450e0ac83ebbfba2161a01f050a53797247
Sha512
05d278645a1be4ba756511a41c469eb1100959ce14ef28e526c49e4cae35990fe7426863c786e2799256fde0fea87098dc09e72ff9956b949e85773401039dc7
SSDeep
12:5jYwTuiN1PUn9lMIaT1OQ++/4X6KhUXuYTtPyac1Xaoi:9Y3OPUnbMIaT1OQ+2ElytTNJc15i
TLSH
30F026FE5713E450ED37D83004363A420E4400855D7EEBDD936ED21E5EB41812EC1D53
3 malicious · 3 files
ZIP3f4894471b02f6d1b51a69927e8892e0T1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKDOC-RI7VA5.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
arc:zip>lnk~T1059.003~T1202~T1204.002
Shape
arc:zip>lnk
malicious
2 nodes
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential3 malicious · 3 files
ZIP3f4894471b02f6d1b51a69927e8892e0T1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKDOC-RI7VA5.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
No malware configuration was found at this point.
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
3f4894471b02f6d1b51a69927e8892e0 › DOC-RI7VA5.lnk
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with EssentialSign in or create a free account to view the matching YARA rules.
Create a free account