Malicious
49d4697cbffc6c404fbc7fe1ca7b3032
ZIP Archive
MD5: 49d4697cbffc6c404fbc7fe1ca7b3032
Size: 971 B
application/zip
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
ZIP archive
Size
971 B · 971 B
First seen
2026-08-03 13:25 · 2 months ago
Last seen
2026-08-03 13:25 · 2 months ago
Last analysis
2026-08-03 13:25 · 2 months ago
Hashes
MD5
49d4697cbffc6c404fbc7fe1ca7b3032
Sha1
c64eca2351ac48201e1507fbf4faf61c7a6f34cb
Sha256
c8f14c165a3b8bab18b8526fca4fb644a96a689b090fa6c5497f5429a107df57
Sha384
d186596a14d730152edd184f69a299f994062f3d1fe622a41f40306b0842f8b2e82994bb415044851713b28586a9efa6
Sha512
26d7381d59757805ebaf185482fd1b32872d49f82c26c47bf4c0ac3c433bee4e24118fca34036c2ee9335d18f5b86da5cc34433ed5861efb508da92cee7bd61b
SSDeep
24:9up0yrCXbcy1uZyTIA6KV2HtiBBXuBsd6VR8tZIK0yxCHn:9NbXIyIwUAjV2H1sYVRcYlH
TLSH
D511C8CA12010C4BEF9F58FCB6DD16E5D67C9A838327A857C934944ACC879606F850A5
3 malicious · 3 files
ZIP49d4697cbffc6c404fbc7fe1ca7b3032T1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKDOC-W9C54I.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
arc:zip>lnk~T1059.003~T1202~T1204.002
Shape
arc:zip>lnk
malicious
2 nodes
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential3 malicious · 3 files
ZIP49d4697cbffc6c404fbc7fe1ca7b3032T1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKDOC-W9C54I.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
No malware configuration was found at this point.
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
49d4697cbffc6c404fbc7fe1ca7b3032 › DOC-W9C54I.lnk
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with EssentialSign in or create a free account to view the matching YARA rules.
Create a free account