Malicious
56d9ab44d3e1cb96553a27d16754c482
ZIP Archive
MD5: 56d9ab44d3e1cb96553a27d16754c482
Size: 587 B
application/zip
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
ZIP archive
Size
587 B · 587 B
First seen
2026-08-03 13:36 · 2 months ago
Last seen
2026-08-03 13:36 · 2 months ago
Last analysis
2026-08-03 13:36 · 2 months ago
Hashes
MD5
56d9ab44d3e1cb96553a27d16754c482
Sha1
33fdae0bb2ed62098dc7bf6e49b0763723a91e23
Sha256
5751ebd69b7ca143fb5df46e7d7c70667cbc96aad680d0ae8e19f920d8bcb3f5
Sha384
56d02750620242f900e851221cf202101992ff6f4e68e4fc2a9a28581c9ffa0d5d7a994fee4194261b06df491df66740
Sha512
a053363439639c1aeeae95b6243f08f876573fb84b818afcc50dead98bc45634f4d0c6f936193f908feb06e3e73c9840ea59bc47f510a1a8f8e2be5341e7d127
SSDeep
12:5j4dYPMvtLyaTyJv84M9T9frWtYm0iH2kvDIkl/yInSdziaol:94dYPMBeVKDWGm0k2krtyiSdGl
TLSH
12F0476A07EA0431C05DE2756790611CD71D2246760F4E97C191E80C0B417CDA96F3F0
3 malicious · 3 files
ZIP56d9ab44d3e1cb96553a27d16754c482T1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKDOC-F9LSHW.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
arc:zip>lnk~T1059.003~T1202~T1204.002
Shape
arc:zip>lnk
malicious
2 nodes
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential3 malicious · 3 files
ZIP56d9ab44d3e1cb96553a27d16754c482T1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKDOC-F9LSHW.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
No malware configuration was found at this point.
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
56d9ab44d3e1cb96553a27d16754c482 › DOC-F9LSHW.lnk
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with EssentialSign in or create a free account to view the matching YARA rules.
Create a free account