Malicious
5541bc2af97e638bf2d0dc964d816095
ZIP Archive
MD5: 5541bc2af97e638bf2d0dc964d816095
Size: 950 B
application/zip
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
ZIP archive
Size
950 B · 950 B
First seen
2026-08-03 10:51 · 2 months ago
Last seen
2026-08-03 10:51 · 2 months ago
Last analysis
2026-08-03 10:51 · 2 months ago
Hashes
MD5
5541bc2af97e638bf2d0dc964d816095
Sha1
09e47f5f2c179d03521b87354aff89d3064c9a84
Sha256
777d7aa75d5ad75f406046abdc904a53544e19a4a47d6e398aa20c78c92e9dd2
Sha384
0c9a8f6360f4fc2534129257254c33931d3b54d436175cfcbab545a576c84d1ce971444078aea1a3d1d043b1b97c005b
Sha512
182482b1a91c05922a9899ccc0903d1bb0e418c426bc031826c725739547f37b34fd4803047101a57f88f5a06016c44408aaa6fe4aea396a4ec13baacd4d33fb
SSDeep
24:9StTU+Vl1mUqvObPKjB/fTg6z0+bp4WOJ3//MLbgEW9df7ABQ2rCwl:9GU+RmE6XRKZ0bvZBJCwl
TLSH
9911C8620300D723C89AD07AC9083F05C57D0B190D677B8E96A611AB1C7C47667E3C00
3 malicious · 3 files
ZIP5541bc2af97e638bf2d0dc964d816095T1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKDOC-GW6BPU.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
arc:zip>lnk~T1059.003~T1202~T1204.002
Shape
arc:zip>lnk
malicious
2 nodes
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential3 malicious · 3 files
ZIP5541bc2af97e638bf2d0dc964d816095T1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKDOC-GW6BPU.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
No malware configuration was found at this point.
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
5541bc2af97e638bf2d0dc964d816095 › DOC-GW6BPU.lnk
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with EssentialSign in or create a free account to view the matching YARA rules.
Create a free account