Malicious
557db249ce40027fe77af9b7e17d7f82
ZIP Archive
MD5: 557db249ce40027fe77af9b7e17d7f82
Size: 830 B
application/zip
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
ZIP archive
Size
830 B · 830 B
First seen
2026-08-04 08:34 · 2 months ago
Last seen
2026-08-04 08:34 · 2 months ago
Last analysis
2026-08-04 08:34 · 2 months ago
Hashes
MD5
557db249ce40027fe77af9b7e17d7f82
Sha1
42eda1107e845d3c401b97966bdc88db5f64dce1
Sha256
a062611fe25c1e4060bab494000e79c3c1e7eab19ac4d337c0fedfd94527b004
Sha384
5acdec1537b493705cb97789afbd5a57d157e8a2216b40be3d8c1ab29701e1decd1d35823b3c6c80898417825fd08fa8
Sha512
f7b16cc6ba2ff6267ef767699be4a0c88549d965b9c9b00b8bad8150bfc8e6c9e290f4af24aaf82779f6f5c9f9abfca1fbacf1a11ac32ebf3c392a95abaff1ba
SSDeep
24:9/586PKhPyk1R++Z+lIg8Q8PAsyKWoHV2FpJU6uxN+5:966P6Kk17UIcTKWooJRun+5
TLSH
EE0175737091451CFF29DEF90EA0F64DB03BB772A20AD8225098C04B3D752A0DE79419
3 malicious · 3 files
ZIP557db249ce40027fe77af9b7e17d7f82T1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKDOC-9THVHM.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
arc:zip>lnk~T1059.003~T1202~T1204.002
Shape
arc:zip>lnk
malicious
2 nodes
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential3 malicious · 3 files
ZIP557db249ce40027fe77af9b7e17d7f82T1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKDOC-9THVHM.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
No malware configuration was found at this point.
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
557db249ce40027fe77af9b7e17d7f82 › DOC-9THVHM.lnk
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with EssentialSign in or create a free account to view the matching YARA rules.
Create a free account