Malicious
412bc0a46538862386562c5dc0328311
ZIP Archive
MD5: 412bc0a46538862386562c5dc0328311
Size: 577 B
application/zip
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
ZIP archive
Size
577 B · 577 B
First seen
2026-08-03 10:49 · 2 months ago
Last seen
2026-08-03 10:49 · 2 months ago
Last analysis
2026-08-03 10:49 · 2 months ago
Hashes
MD5
412bc0a46538862386562c5dc0328311
Sha1
4d392507a7a3bc6b4cce671abc6c82850674609e
Sha256
b7430fda78fb5e8ac92820daba8864f2ae41417ab2aaf080d776b96b9ef69d54
Sha384
69c6cff6321c6cd776689d25318b4ab42df9e62e83cbc69a14ca7ec9811e8ac4fa5d1243b4a8cfae7b9d77648f6362ab
Sha512
9017cef9b3b39c2d67e9254c937f945604b88de37a847ebe90058bc771e625cd3a7c8e3618d47621764ff60532b16e44be0f586a57e122ac5de9259ad8b9f5ec
SSDeep
12:5jv5CK+sXa7YsnXGePgSYmO74wePA9RX66az+PsNp5Czbiaov:9hn+sXUWeFYmOfePUXbk+kNXOev
TLSH
1AF026530D660217F60714BD51573A79560F850B8E5A11C7195DD4DAC5605ADCD12851
3 malicious · 3 files
ZIP412bc0a46538862386562c5dc0328311T1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKDOC-56RKMW.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
arc:zip>lnk~T1059.003~T1202~T1204.002
Shape
arc:zip>lnk
malicious
2 nodes
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential3 malicious · 3 files
ZIP412bc0a46538862386562c5dc0328311T1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKDOC-56RKMW.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
No malware configuration was found at this point.
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
412bc0a46538862386562c5dc0328311 › DOC-56RKMW.lnk
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with EssentialSign in or create a free account to view the matching YARA rules.
Create a free account