Malicious
Malicious

612efb76d1f10433a6a6ce581b11dbde

ZIP Archive
MD5: 612efb76d1f10433a6a6ce581b11dbde
Size: 957 B
application/zip

This sample is a 957 bytes ZIP Archive for which Malva.RE's static analysis did not establish a malicious verdict. Static analysis extracted 2 embedded or derived files. It matches 1 YARA rule. Observed behaviours map to MITRE ATT&CK T1059.003, T1202: INDIRECT COMMAND EXECUTION and T1204.002. The file was analysed statically: it was parsed and decompiled, never executed.

SHA256
a2ea044b8d6059270a9a5713d6607fba4ce18bee1a770c29a8c76e23396a1952
MD5
612efb76d1f10433a6a6ce581b11dbde
Verdict
Malicious
File type
ZIP Archive · 957 bytes
Category
LOLBin

Cite this report: https://app.malva.re/sha256/a2ea044b8d6059270a9a5713d6607fba4ce18bee1a770c29a8c76e23396a1952

Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential

File
Type
ZIP archive
Size
957 B · 957 B
First seen
2026-08-03 13:24 · 2 months ago
Last seen
2026-08-03 13:24 · 2 months ago
Last analysis
2026-08-03 13:24 · 2 months ago
Hashes
MD5 612efb76d1f10433a6a6ce581b11dbde Sha1 5bfcdd9d951b4d804c8c69f75e0c7806e077b71c Sha256 a2ea044b8d6059270a9a5713d6607fba4ce18bee1a770c29a8c76e23396a1952 Sha384 173ac3e36a86b1ae9db4007733be16e2429fa7995af309c34ab3a2506e85d7ec0e9d99fc82546e82e49d6b83b9e09fd7 Sha512 ec8516f3954c44d7f11e165738cd9444d4174fa21fa31fa71a0bb48be237cfee54300eb1f68d4c7d772a83ef604727f6c2f99126a39420b89d4c037ccc21c539 SSDeep 24:9axjo781BwUPoARCZp6EJQxhZIfNK1d1IAHw7Yxj8rt:9IjoA1CubCZBJmsK1dM+j8rt TLSH 1C1188C3F3560481D1ECD4FA0459725B867042C4510AD95F386DB86747E397C6906B53

3 malicious · 3 files
ZIP612efb76d1f10433a6a6ce581b11dbdeLOLBin
LNKDOC-2SRYDH.lnkLOLBin
BIN[Lnk Summary]
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
Path arc:zip>lnk~T1059.003~T1202~T1204.002
Shape arc:zip>lnk
malicious 2 nodes

LNK: Command Execution UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential

3 malicious · 3 files
ZIP612efb76d1f10433a6a6ce581b11dbdeLOLBin
LNKDOC-2SRYDH.lnkLOLBin
BIN[Lnk Summary]
No malware configuration was found at this point.

LNK: Command Execution UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
612efb76d1f10433a6a6ce581b11dbde › DOC-2SRYDH.lnk
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential
Sign in or create a free account to view the matching YARA rules. Create a free account
An error has occurred. This application may no longer respond until reloaded. Reload 🗙