Malicious
Malicious

406a0b2e81c59d9d54ed7ca5806cc727

ZIP Archive
MD5: 406a0b2e81c59d9d54ed7ca5806cc727
Size: 584 B
application/zip
Ctrl + scroll to zoom · drag to pan

This sample is a 584 bytes ZIP Archive classified as malicious by Malva.RE (lolbin). Static analysis extracted 2 embedded or derived files. It matches 1 YARA rule. Observed behaviours map to MITRE ATT&CK T1059.003, T1202: INDIRECT COMMAND EXECUTION and T1204.002. The file was analysed statically: it was parsed and decompiled, never executed.

SHA256
1e2e8b75c3227f0dee3b6bf46431cb84b9e0157679117927171b360cc9adac69
MD5
406a0b2e81c59d9d54ed7ca5806cc727
Verdict
Malicious
File type
ZIP Archive · 584 bytes
Category
LOLBin

Cite this report: https://app.malva.re/sha256/1e2e8b75c3227f0dee3b6bf46431cb84b9e0157679117927171b360cc9adac69

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential

File
Type
ZIP archive
Size
584 B · 584 B
First seen
2026-08-03 11:09 · 2 months ago
Last seen
2026-08-03 11:09 · 2 months ago
Last analysis
2026-08-03 11:09 · 2 months ago
Hashes
MD5 406a0b2e81c59d9d54ed7ca5806cc727 Sha1 8ae8a29bf5ac03a869c85a8737692379ee4b0aa6 Sha256 1e2e8b75c3227f0dee3b6bf46431cb84b9e0157679117927171b360cc9adac69 Sha384 e8e7631cee63988c8d7a4eedbfaef078767dc6177774cc6dbde9a9d4416be7e30d3e971dac2c5daca39aec0b6c9f7719 Sha512 6d196e90a8b061ecbeb9bee18bec919fccbb01430635ab41ce670f3c4fe229895fe1124e61a5dfe0995e72abcacb0c690e02c2c8c9e6933967fc20762b9e47cf SSDeep 12:5jQ5r9PAvubNTMaGygAkccKGIn0NeS1kt712SimFWaaaoo:9QVbGCvBGInw1ktTxBao TLSH E7F041B481A0A4E4D2ADA9FC360F2B59C4B90882C966DA076D24D0C3CC812A2EA0FC35

3 malicious · 3 files
ZIP406a0b2e81c59d9d54ed7ca5806cc727LOLBin
LNKDOC-WUENSS.lnkLOLBin
BIN[Lnk Summary]
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
Path arc:zip>lnk~T1059.003~T1202~T1204.002
Shape arc:zip>lnk
malicious 2 nodes

LNK: Command Execution UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential

3 malicious · 3 files
ZIP406a0b2e81c59d9d54ed7ca5806cc727LOLBin
LNKDOC-WUENSS.lnkLOLBin
BIN[Lnk Summary]
No malware configuration was found at this point.

LNK: Command Execution UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
406a0b2e81c59d9d54ed7ca5806cc727 › DOC-WUENSS.lnk
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential
Sign in or create a free account to view the matching YARA rules. Create a free account
An error has occurred. This application may no longer respond until reloaded. Reload 🗙