Malicious
ZIP Archive
MD5: 4159cff3334474e0e689260a72456eb3
Size: 956 B
application/zip
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
ZIP archive
Size
956 B · 956 B
First seen
2026-08-04 08:06 · 2 months ago
Last seen
2026-08-04 08:06 · 2 months ago
Last analysis
2026-08-04 08:06 · 2 months ago
Hashes
MD5
4159cff3334474e0e689260a72456eb3
Sha1
83d505aeb420eeb599c82323c34dc18a3ab069c6
Sha256
82c1d6afdc7c2f4895748784a6e3987c0128ce730b2da921086621884f1e60ec
Sha384
7a11faf44956df93c15f271df9aa70a09c8199cd5e847042f88f256fff59607103905342ba57eb86c351f19a0c6363ff
Sha512
ddf194805cccd925c23a8759438514ac717052cc32f08f0161415813ad2ebbdb9beba87bf3b186ee411c22494ee7ac9fb40a022b2a180358a18d2495704c7205
SSDeep
24:9OJujBaaxXv0iJ8Uz7yc2RFSQWAL+t44DKl:9OJ0UiygmvW4+S4D+
TLSH
6E110CC8518C5D34C0C8E0F39B20BA3C3A69CC44338A50C75350F8B472271A40E4A7C2
3 malicious · 3 files
ZIP4159cff3334474e0e689260a72456eb3T1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKDOC-TKBRUY.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
arc:zip>lnk~T1059.003~T1202~T1204.002
Shape
arc:zip>lnk
malicious
2 nodes
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential