Malicious
609a866c19a34a69482fda205b23d52e
ZIP Archive
MD5: 609a866c19a34a69482fda205b23d52e
Size: 587 B
application/zip
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
ZIP archive
Size
587 B · 587 B
First seen
2026-08-03 10:48 · 2 months ago
Last seen
2026-08-03 10:48 · 2 months ago
Last analysis
2026-08-03 10:48 · 2 months ago
Hashes
MD5
609a866c19a34a69482fda205b23d52e
Sha1
2adc8e89cba77e7e34a6c099185ba9f12602723c
Sha256
ce72f4ee863de4fd4ba8d30ec942c7f02f5bb294b0764d974e51051822d70d55
Sha384
7b5e01557a469a5ca1178b515a38c0dfead5e555d50f035470385d28a8e527e185d8fc2a4f5dfec25fdb81187eb45a02
Sha512
87a311b73d2bfd313492a8558bcc7b6c70c9971494a302e0fde465fd44f051895d7055e568a15a86db5559c399836511d77591c6120ff8d6f2c489741cf27854
SSDeep
12:5jdJ+iQf9QI91LFYi6nqX/ZwijrddHSjTMZmLekp6T2Yaol:9dQjGxEZbrfZmzp6Trl
TLSH
0FF04163C273292ECC0690BBEB8E3A7A0B81408948762F966238984ECAB50D40BCC651
3 malicious · 3 files
ZIP609a866c19a34a69482fda205b23d52eT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKDOC-VWS5LH.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
arc:zip>lnk~T1059.003~T1202~T1204.002
Shape
arc:zip>lnk
malicious
2 nodes
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential3 malicious · 3 files
ZIP609a866c19a34a69482fda205b23d52eT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKDOC-VWS5LH.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
No malware configuration was found at this point.
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
609a866c19a34a69482fda205b23d52e › DOC-VWS5LH.lnk
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with EssentialSign in or create a free account to view the matching YARA rules.
Create a free account