Malicious
Malicious

612d44f00bca1cb24d1f5def56f05b9b

ZIP Archive
MD5: 612d44f00bca1cb24d1f5def56f05b9b
Size: 918 B
application/zip
Ctrl + scroll to zoom · drag to pan

This sample is a 918 bytes ZIP Archive classified as malicious by Malva.RE (lolbin). Static analysis extracted 2 embedded or derived files. It matches 1 YARA rule. Observed behaviours map to MITRE ATT&CK T1059.003, T1202: INDIRECT COMMAND EXECUTION and T1204.002. The file was analysed statically: it was parsed and decompiled, never executed.

SHA256
d589f1a00bf53f3b9a3b3c561b807b195e044b8e38c65e8605536845803ab038
MD5
612d44f00bca1cb24d1f5def56f05b9b
Verdict
Malicious
File type
ZIP Archive · 918 bytes
Category
LOLBin

Cite this report: https://app.malva.re/sha256/d589f1a00bf53f3b9a3b3c561b807b195e044b8e38c65e8605536845803ab038

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential

File
Type
ZIP archive
Size
918 B · 918 B
Hashes
MD5 612d44f00bca1cb24d1f5def56f05b9b Sha1 5862cd7951083bd10eec38667dc1b1d512f4e119 Sha256 d589f1a00bf53f3b9a3b3c561b807b195e044b8e38c65e8605536845803ab038 Sha384 f1a8131786d187113a144d91491b4dcc172ec0a3c629b71d06e04be870d710bfedbf4f10e8f375a9e042cc7619b46a86 Sha512 abafea01f407f76c35459d32ba8ce239f6db5df3224a644c819495a4e164af2179064a0676fd7e95e4d4539205b59daeed69984c8272de3d39b26b74cf6de2a4 SSDeep 24:9Q27Lyl8Z+G7g6Km5iP99eKLC0PvibBdk0JBe27Aw:9Q27U88KggCuKLFHkxJBe27Aw TLSH 6D11B7C2DF352420FAD5A377697C75E201764485909A3662882E64CC38185F4EF4C630

3 malicious · 3 files
ZIP612d44f00bca1cb24d1f5def56f05b9bLOLBin
LNKDOC-3UB5DM.lnkLOLBin
BIN[Lnk Summary]
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
Path arc:zip>lnk~T1059.003~T1202~T1204.002
Shape arc:zip>lnk
malicious 2 nodes

LNK: Command Execution UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential

3 malicious · 3 files
ZIP612d44f00bca1cb24d1f5def56f05b9bLOLBin
LNKDOC-3UB5DM.lnkLOLBin
BIN[Lnk Summary]
No malware configuration was found at this point.

LNK: Command Execution UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
612d44f00bca1cb24d1f5def56f05b9b › DOC-3UB5DM.lnk
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential
Sign in or create a free account to view the matching YARA rules. Create a free account
An error has occurred. This application may no longer respond until reloaded. Reload 🗙