Malicious
52ae4ced1400797d53d1fb46619005e5
ZIP Archive
MD5: 52ae4ced1400797d53d1fb46619005e5
Size: 583 B
application/zip
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
ZIP archive
Size
583 B · 583 B
First seen
2026-08-04 08:25 · 2 months ago
Last seen
2026-08-04 08:25 · 2 months ago
Last analysis
2026-08-04 08:25 · 2 months ago
Hashes
MD5
52ae4ced1400797d53d1fb46619005e5
Sha1
c26674fb710d66f42f1a5b7b7bdcd8d5334899b4
Sha256
73c58e2a305c0752be4042c8bb248c541c5edf44c2632827dcf54350795806db
Sha384
410d69fa405440b031d9dfe3e090d85f1c8a8242cf05f60f63f9063f6dc53ee4b96f0637f435e50ecce858fc1e7b482f
Sha512
208eaeb46931b563dc4dcadd306aa4eea185d61c546bc33085cdf6006b1c79f935cd0d09d027a55b1fff61b9e652d69ce0a42559f0175d4db810fc878da3ba82
SSDeep
12:5jpj61KGHSuWXitVJGWpDWlRvNHM6aYCh95pq+PPOjl91Ya8B174jwJaoBn:9NOHyXmpDWlJNsuCr5EYPs715gueB
TLSH
C2F0417D4B245061E626C1FF5332303A821B266180139619576950D1B9009735EE4BDD
3 malicious · 3 files
ZIP52ae4ced1400797d53d1fb46619005e5T1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKDOC-JSAMFF.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
arc:zip>lnk~T1059.003~T1202~T1204.002
Shape
arc:zip>lnk
malicious
2 nodes
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential3 malicious · 3 files
ZIP52ae4ced1400797d53d1fb46619005e5T1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKDOC-JSAMFF.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
No malware configuration was found at this point.
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
52ae4ced1400797d53d1fb46619005e5 › DOC-JSAMFF.lnk
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with EssentialSign in or create a free account to view the matching YARA rules.
Create a free account