Malicious
ZIP Archive
MD5: 4b6899efd1dc10f78dca9fae08ed1ac4
Size: 596 B
application/zip
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
ZIP archive
Size
596 B · 596 B
First seen
2026-08-03 12:10 · 2 months ago
Last seen
2026-08-03 12:10 · 2 months ago
Last analysis
2026-08-03 12:10 · 2 months ago
Hashes
MD5
4b6899efd1dc10f78dca9fae08ed1ac4
Sha1
363a58149919c0972650227e5ccaa44c11713651
Sha256
9492fc85d3a5b0f1d71f29bcb99b60afefb5b83b8fb8d32763a429125fe61018
Sha384
1866cf443d16ff6cd6d95edc7152973ca792a099cb51cd47a4b623076bbc65633ce8216a605a8f9d6c57a77ac7c827fc
Sha512
3b4f677c067b2f551f0dcf159b21d43a55c41b8b1b056182a567a85bf530801b827630833ad7a965f645624103a60dc980cd2d8adc406807bacc778cd3a6810d
SSDeep
12:5j4AaDP38htPBgUUci4BPv6YOP5pm+pDie9DDVQrrrieV7iAahalX:94Aab8rPgb4Zv6dbhDLDxQHriI7iAaKX
TLSH
70F02646F0C0C386E105C6715CF280240EE8E2F5351FB8CE619A5D863C70DD74BA6191
3 malicious · 3 files
ZIP4b6899efd1dc10f78dca9fae08ed1ac4T1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKLeXNET-DOC-KIUV8Y.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
arc:zip>lnk~T1059.003~T1202~T1204.002
Shape
arc:zip>lnk
malicious
2 nodes
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential