Malicious
490980ad445b60ecedd1e157ab5f45e0
ZIP Archive
MD5: 490980ad445b60ecedd1e157ab5f45e0
Size: 594 B
application/zip
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
ZIP archive
Size
594 B · 594 B
First seen
2026-08-04 08:36 · 2 months ago
Last seen
2026-08-04 08:36 · 2 months ago
Last analysis
2026-08-04 08:36 · 2 months ago
Hashes
MD5
490980ad445b60ecedd1e157ab5f45e0
Sha1
9f12d7e03d3198fa372c41b00148f28a5acc4391
Sha256
c6a14ddedcb1da413495f370a2b4d975852b262019bec74c62dd1229c2fb1803
Sha384
4420314db5541b8c9658f1a26ffb8efe10a5dbd3b3d8b9603175c273d2b55e6f717431c7fbe7fd073cf8a47111e48914
Sha512
a6060e036504238217617fedb357b9519d7a8bb6d06cf095a0c79c027c67537ed5fabc6b592f47b4a78f3ed86cd6501e05df080aab797994b9f1f8658327b277
SSDeep
12:5jBTE8ijKgz8kjnezZQTO1M4pcVy3VSAOOx8TFzsVu6gUQUUCErKdTMt7XEEuaoN:968irHezf1M47V8Ox8R6u6gZCYmY7heN
TLSH
28F0E1678270C065C80F487A24BD2B29A47E0018E56BAD09733BC80E2D32B06E769182
3 malicious · 3 files
ZIP490980ad445b60ecedd1e157ab5f45e0T1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKDOC-CDHA1G.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
arc:zip>lnk~T1059.003~T1202~T1204.002
Shape
arc:zip>lnk
malicious
2 nodes
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential3 malicious · 3 files
ZIP490980ad445b60ecedd1e157ab5f45e0T1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKDOC-CDHA1G.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
No malware configuration was found at this point.
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
490980ad445b60ecedd1e157ab5f45e0 › DOC-CDHA1G.lnk
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with EssentialSign in or create a free account to view the matching YARA rules.
Create a free account