Malicious
5b894192ac7604ed2fbc0884e8947f84
ZIP Archive
MD5: 5b894192ac7604ed2fbc0884e8947f84
Size: 584 B
application/zip
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
ZIP archive
Size
584 B · 584 B
First seen
2026-08-03 11:03 · 2 months ago
Last seen
2026-08-03 11:03 · 2 months ago
Last analysis
2026-08-03 11:03 · 2 months ago
Hashes
MD5
5b894192ac7604ed2fbc0884e8947f84
Sha1
35ca46fb7b21a29b94ec07818059cd50aa68c66f
Sha256
6df1b8f7d2e5186fe833f8650546d72e47e5257722147dd4fc8438d27c46e2fb
Sha384
8ba8eb8214a331c493a2216c2f98ddb28cafb7830ad14ea85e2c179ba0e4cf8e3ae8833b5e4b16677b2da1d017292e9a
Sha512
6a95ce4faaa07192674d0e885d027cf2fe77492899b3e70ef685c755616a72ab211d9a8df3636abaca5c815c827e2ec01cfef5a64f9a3fad2785f9a1382ff3dd
SSDeep
12:5jcGK5b77O7Yz27TS7H4FJWF/fnUnirZunGs12yG3aoo:9c55fC7Yz2nS7H4SF/f0quqygo
TLSH
E5F02633A3130104CAF350B65B37B5E5977C8245705E5E5B4AD5F8B32C5C1E25A50471
3 malicious · 3 files
ZIP5b894192ac7604ed2fbc0884e8947f84T1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKDOC-JC8GUZ.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
arc:zip>lnk~T1059.003~T1202~T1204.002
Shape
arc:zip>lnk
malicious
2 nodes
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential3 malicious · 3 files
ZIP5b894192ac7604ed2fbc0884e8947f84T1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKDOC-JC8GUZ.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
No malware configuration was found at this point.
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
5b894192ac7604ed2fbc0884e8947f84 › DOC-JC8GUZ.lnk
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with EssentialSign in or create a free account to view the matching YARA rules.
Create a free account