Malicious
ZIP Archive
MD5: 4edff2e789ffe1aab67d2fc180c0fb86
Size: 894 B
application/zip
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
ZIP archive
Size
894 B · 894 B
First seen
2026-08-03 10:51 · 2 months ago
Last seen
2026-08-03 10:51 · 2 months ago
Last analysis
2026-08-03 10:51 · 2 months ago
Hashes
MD5
4edff2e789ffe1aab67d2fc180c0fb86
Sha1
6076658c39df0083dc27424fa1750d7cb61bd2e2
Sha256
3847b188fa3c88b4e1114804d356e65d3142163becee08814c927c36747af6d6
Sha384
de2946824345615e19e22ab5b1a271545c3d387959c826b3e1131f5e68a40eb8f2ba67a572b53129e78d8e032a77915c
Sha512
16d5c977aade51bebaf43db7afe70f7d022ba58296a64c80cba97876db48f45390206b6763a08334a7cb3774b02fd84275edf309224411e2740ab7ae321e4ff3
SSDeep
24:9z8dju46Qgonflif9FF+FFD908bAO4lyH0yOopKuR/fb98go:9zT47COFhZbAO4VxopVlb9lo
TLSH
DF1196239D80A09CF1D0C5B885A25D818544828B36AA0E4F3B79FFC559F08FD774969D
3 malicious · 3 files
ZIP4edff2e789ffe1aab67d2fc180c0fb86T1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKDOC-HV52CP.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
arc:zip>lnk~T1059.003~T1202~T1204.002
Shape
arc:zip>lnk
malicious
2 nodes
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential