Malicious
Malicious

40c016c9b3fd619e57419e1bbddd126c

ZIP Archive
MD5: 40c016c9b3fd619e57419e1bbddd126c
Size: 582 B
application/zip

This sample is a 582 bytes ZIP Archive for which Malva.RE's static analysis did not establish a malicious verdict. Static analysis extracted 2 embedded or derived files. It matches 1 YARA rule. Observed behaviours map to MITRE ATT&CK T1059.003, T1202: INDIRECT COMMAND EXECUTION and T1204.002. The file was analysed statically: it was parsed and decompiled, never executed.

SHA256
e2672c2735c087be8643a71e25ae18e41b306874deec099dba0b2d8932596590
MD5
40c016c9b3fd619e57419e1bbddd126c
Verdict
Malicious
File type
ZIP Archive · 582 bytes
Category
LOLBin

Cite this report: https://app.malva.re/sha256/e2672c2735c087be8643a71e25ae18e41b306874deec099dba0b2d8932596590

Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential

File
Type
ZIP archive
Size
582 B · 582 B
First seen
2026-08-03 11:28 · 2 months ago
Last seen
2026-08-03 11:28 · 2 months ago
Last analysis
2026-08-03 11:28 · 2 months ago
Hashes
MD5 40c016c9b3fd619e57419e1bbddd126c Sha1 5e3223f67d680c99d064e244dc1788a850616434 Sha256 e2672c2735c087be8643a71e25ae18e41b306874deec099dba0b2d8932596590 Sha384 6ada396941a77939182ba894d63a7787297e33944277e8b4f8079b641669c3166007a0f7d59381d83f3a6dc979b483c0 Sha512 0abdc7a34bc12ffd6d8d2315c2923d61dca3d6dbdb725a5da7cdb78964c843fd73ea4416692a06cdc051ea2fc7b00402214525d565850553aaf32ba5ddd21ecd SSDeep 12:5j2eQ5blNa8ipOZYFKIYbf8ZJUj17d8CEHHv0yVsMBce5aoi:92eQ5JuOZ8KIYbUZJUj1BAPVsMBceHi TLSH 68F0265FB715A940CE5448BD35C03335470E62C6348313D7872CB5032D656F19F092F0

3 malicious · 3 files
ZIP40c016c9b3fd619e57419e1bbddd126cLOLBin
LNKDOC-2P2LLA.lnkLOLBin
BIN[Lnk Summary]
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
Path arc:zip>lnk~T1059.003~T1202~T1204.002
Shape arc:zip>lnk
malicious 2 nodes

LNK: Command Execution UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential

3 malicious · 3 files
ZIP40c016c9b3fd619e57419e1bbddd126cLOLBin
LNKDOC-2P2LLA.lnkLOLBin
BIN[Lnk Summary]
No malware configuration was found at this point.

LNK: Command Execution UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
40c016c9b3fd619e57419e1bbddd126c › DOC-2P2LLA.lnk
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential
Sign in or create a free account to view the matching YARA rules. Create a free account
An error has occurred. This application may no longer respond until reloaded. Reload 🗙