Malicious
591a1ab421e69569f69cfdf4198c1076
ZIP Archive
MD5: 591a1ab421e69569f69cfdf4198c1076
Size: 590 B
application/zip
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
ZIP archive
Size
590 B · 590 B
First seen
2026-08-03 10:28 · 2 months ago
Last seen
2026-08-03 10:28 · 2 months ago
Last analysis
2026-08-03 10:28 · 2 months ago
Hashes
MD5
591a1ab421e69569f69cfdf4198c1076
Sha1
fd9051dbb71a49fcef9ee47628ed2faebc877b05
Sha256
afb93654b0368509faf2e087b5809b5289d764fa0d937aa83d248d79a036b860
Sha384
4709fb684050f0777f54cffdc9feb06fcca1165b2fa5f66b50095769cf40601923a88bbe1827cc723fb4d27756924474
Sha512
3981466973a32db10d2642e7362f4df0560cffae7584d98fc72c3634135b0e2556e7eb89908146f1294dff02de6f8ac5c8d653310e4061ab5f526d96f5fcd746
SSDeep
12:5j6B1kiuYT3eHKPtrzPQrqClh5HBHsRyFifd904+M0lKCi32UZUqkao6:96nkiuYpPpPQWCf5JwyFIaNM0I3zZU/6
TLSH
1DF096B3524010BDF60B65B980013B5D031DE0F3081EEF2FFB12CD5A06899BAA66ECB4
3 malicious · 3 files
ZIP591a1ab421e69569f69cfdf4198c1076T1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKDOC-SBHTFH.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
arc:zip>lnk~T1059.003~T1202~T1204.002
Shape
arc:zip>lnk
malicious
2 nodes
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential3 malicious · 3 files
ZIP591a1ab421e69569f69cfdf4198c1076T1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKDOC-SBHTFH.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
No malware configuration was found at this point.
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
591a1ab421e69569f69cfdf4198c1076 › DOC-SBHTFH.lnk
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with EssentialSign in or create a free account to view the matching YARA rules.
Create a free account