Malicious
5ba3f16cf8516088e37e1d79e05411d5
ZIP Archive
MD5: 5ba3f16cf8516088e37e1d79e05411d5
Size: 597 B
application/zip
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
ZIP archive
Size
597 B · 597 B
First seen
2026-08-04 08:35 · 2 months ago
Last seen
2026-08-04 08:35 · 2 months ago
Last analysis
2026-08-04 08:35 · 2 months ago
Hashes
MD5
5ba3f16cf8516088e37e1d79e05411d5
Sha1
235a5f862ea2fc88d23a20239c591d5c235259ca
Sha256
1940aafb695c8b14d4459ca6239b8c057e2a61dcafa736db4b26df87c00b1527
Sha384
cd1161ca2d70d28673bbebccf262f5d8c01079b68ff51d105356ada8c099a4f5cd6ca37c48a99b85f8ef4308197a2c16
Sha512
ec82d77f316f330cc5c8efa0dfa4deadcb19f8e69cc2d467618ef90f097a9a160f6eda85c1cb11548f2bb0cf3e31aba02944497820073d832f884fc94e1c30c1
SSDeep
12:5jP5GixhZygXON9A2x2OAxYAy5EwI+hf3qQGzlbWc4DGXzZYQ1vG42snt59i6aoQ:9xbxPyKON9JEnxYAy5Ef+paFhbdCGjZO
TLSH
F7F0E1CFD59FD107ED00853DA8703B1DC77864720706AC992D56F666F929E841C91410
3 malicious · 3 files
ZIP5ba3f16cf8516088e37e1d79e05411d5T1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKDOC-KWG4I0.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
arc:zip>lnk~T1059.003~T1202~T1204.002
Shape
arc:zip>lnk
malicious
2 nodes
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential3 malicious · 3 files
ZIP5ba3f16cf8516088e37e1d79e05411d5T1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKDOC-KWG4I0.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
No malware configuration was found at this point.
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
5ba3f16cf8516088e37e1d79e05411d5 › DOC-KWG4I0.lnk
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with EssentialSign in or create a free account to view the matching YARA rules.
Create a free account