Malicious
4a5968b4e7bf76c68070cf92e79f089b
ZIP Archive
MD5: 4a5968b4e7bf76c68070cf92e79f089b
Size: 585 B
application/zip
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
ZIP archive
Size
585 B · 585 B
First seen
2026-08-03 13:39 · 2 months ago
Last seen
2026-08-03 13:39 · 2 months ago
Last analysis
2026-08-03 13:39 · 2 months ago
Hashes
MD5
4a5968b4e7bf76c68070cf92e79f089b
Sha1
e022b0db29ac5f6a0bb6fb7de8a9b14400d48769
Sha256
72c6b93ae646053a177950256260ba44d07433b550bbe4003883c1af7a5544b5
Sha384
a6dc7e2a325c11ebb4072a8d7c0b2305172150efde3d593a74c29d24cecc9e1b3d0757a5876349cc4e0b0283264b3f31
Sha512
6807e850cf2e3e93bfe53aca1c4fc2347e4fa72b07fab4090b92dbc7bd874bb8cc6977c3c0bc9cfe9f0014c79bfbd9b3342f0fa8d91531c566e7399c04ed2eb0
SSDeep
12:5jIuQ/vXpYO8Reqydb5gYdAmgMJGDj7y2P8Wc89hEgBMCdzzamBulQPaoH:9yfihe119dAmgMJGDHD089hFBlhBB5H
TLSH
C9F041E1A20A5F82E822003CC821027ACB689272A1E9C37E3A74FDB938304881B98112
3 malicious · 3 files
ZIP4a5968b4e7bf76c68070cf92e79f089bT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKDOC-K3F2XQ.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
arc:zip>lnk~T1059.003~T1202~T1204.002
Shape
arc:zip>lnk
malicious
2 nodes
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential3 malicious · 3 files
ZIP4a5968b4e7bf76c68070cf92e79f089bT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKDOC-K3F2XQ.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
No malware configuration was found at this point.
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
4a5968b4e7bf76c68070cf92e79f089b › DOC-K3F2XQ.lnk
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with EssentialSign in or create a free account to view the matching YARA rules.
Create a free account