Malicious
Malicious

458f4b69a4f3fb7e1d95202418ed6a09

ZIP Archive
MD5: 458f4b69a4f3fb7e1d95202418ed6a09
Size: 933 B
application/zip

This sample is a 933 bytes ZIP Archive for which Malva.RE's static analysis did not establish a malicious verdict. Static analysis extracted 2 embedded or derived files. It matches 1 YARA rule. Observed behaviours map to MITRE ATT&CK T1059.003, T1202: INDIRECT COMMAND EXECUTION and T1204.002. The file was analysed statically: it was parsed and decompiled, never executed.

SHA256
cb82c61837e74af5ea2029652729301e549410c677e96da27a85a3bf04f6015d
MD5
458f4b69a4f3fb7e1d95202418ed6a09
Verdict
Malicious
File type
ZIP Archive · 933 bytes
Category
LOLBin

Cite this report: https://app.malva.re/sha256/cb82c61837e74af5ea2029652729301e549410c677e96da27a85a3bf04f6015d

Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential

File
Type
ZIP archive
Size
933 B · 933 B
First seen
2026-08-03 10:52 · 2 months ago
Last seen
2026-08-03 10:52 · 2 months ago
Last analysis
2026-08-03 10:52 · 2 months ago
Hashes
MD5 458f4b69a4f3fb7e1d95202418ed6a09 Sha1 c7215b0ade04085ca40f5730a494731c225047cb Sha256 cb82c61837e74af5ea2029652729301e549410c677e96da27a85a3bf04f6015d Sha384 6b0b9e6209d7199ab71a30794d3366ae4c839ed5dbeef29099c42e392f7a380ee7977c6e291879d6c05dc4df10a70368 Sha512 79449fbd55cb1c61e2633de6ca278269c223fb806bfa300563876d3892b0115b462e8ab98667aef539b4c7a50e17f7d92965de535eec32871a7f5a8ec2d766fc SSDeep 24:9V5rdGEKDXdDfPChp3+tb6YtBR1gtIzo0Zkskl9BC469mcAEU2j5rsTt:9V5rdG1L1fI1gOSEtIlkS1j5rsTt TLSH 4611844283B299B8C3A483FE6A3BA24115114D28AB8D7877B9E5D6654E907626814709

3 malicious · 3 files
ZIP458f4b69a4f3fb7e1d95202418ed6a09LOLBin
LNKDOC-R2UMPD.lnkLOLBin
BIN[Lnk Summary]
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
Path arc:zip>lnk~T1059.003~T1202~T1204.002
Shape arc:zip>lnk
malicious 2 nodes

LNK: Command Execution UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential

3 malicious · 3 files
ZIP458f4b69a4f3fb7e1d95202418ed6a09LOLBin
LNKDOC-R2UMPD.lnkLOLBin
BIN[Lnk Summary]
No malware configuration was found at this point.

LNK: Command Execution UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
458f4b69a4f3fb7e1d95202418ed6a09 › DOC-R2UMPD.lnk
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential
Sign in or create a free account to view the matching YARA rules. Create a free account
An error has occurred. This application may no longer respond until reloaded. Reload 🗙