Malicious
599ac6927bee14fcef8bce54117aef85
ZIP Archive
MD5: 599ac6927bee14fcef8bce54117aef85
Size: 581 B
application/zip
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
ZIP archive
Size
581 B · 581 B
First seen
2026-08-03 13:03 · 2 months ago
Last seen
2026-08-03 13:03 · 2 months ago
Last analysis
2026-08-03 13:03 · 2 months ago
Hashes
MD5
599ac6927bee14fcef8bce54117aef85
Sha1
6bae5006523b6f28c43d228a946a64f4d26191e0
Sha256
03f9d3437dc4c5a6f6c1896f30d2d60028851fcb3f1b883551282e6544f6498c
Sha384
1fd43bafcd55867e0f179af9211966579a15b6beed2f76c9e4b32cb0784ec5934d381e45cc59c7f5ce575cdff0e5a7be
Sha512
c16099e9b5217aee2fc1fd28e5c93b7c1f17198f5ee23f8bf87f903b9eb7fb04bddd8e9f5ab8e07f228a24f13593a54eac7eac1d9a2cd7286ef316d9bece3e0c
SSDeep
12:5jdURe6js378m9xwhUVBYKrjJuqgHDdwxdG/nBQ5XdU0QPTBvURZ6aoT:9dkHjs378m9iiV6ZqwD6InYtAPFvkYT
TLSH
53F0E125562628D0C1573636BD06E7F1128F44A6DA1439122338FB45FB221E46A5C896
3 malicious · 3 files
ZIP599ac6927bee14fcef8bce54117aef85T1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKDOC-ZWHQUG.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
arc:zip>lnk~T1059.003~T1202~T1204.002
Shape
arc:zip>lnk
malicious
2 nodes
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential3 malicious · 3 files
ZIP599ac6927bee14fcef8bce54117aef85T1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKDOC-ZWHQUG.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
No malware configuration was found at this point.
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
599ac6927bee14fcef8bce54117aef85 › DOC-ZWHQUG.lnk
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with EssentialSign in or create a free account to view the matching YARA rules.
Create a free account