Malicious
61b7825c02143616cb644f420adb5146
ZIP Archive
MD5: 61b7825c02143616cb644f420adb5146
Size: 588 B
application/zip
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
ZIP archive
Size
588 B · 588 B
First seen
2026-08-04 08:20 · 2 months ago
Last seen
2026-08-04 08:20 · 2 months ago
Last analysis
2026-08-04 08:20 · 2 months ago
Hashes
MD5
61b7825c02143616cb644f420adb5146
Sha1
a048b8c6bd6251405b9b7f1c76d73c2f6390f2ed
Sha256
488489856a8c5912d5ce0f28c70f8c6c8aeb2a1faa8f1f8d0fc64b00680c3d18
Sha384
ee25ee131ece9de53571d512f2cb88c888e1bd7bbf89928ba71d4a25e3b90e02c8fe946d179cc72f17b899b943051b37
Sha512
66290a14672eca35d9fb389d859e94443b89881e207282c31d57ea37798f20bb6fbca53dfce378ba862380069d47c27fc4f24eff22c406d884ca60fad81e5f24
SSDeep
12:5jOZifMS8z0DJ79zHBCk16ZXHKk2AaEqaB+uyfRl238wDDogcE7YZiIeaoM:9AifMS8zUXz8k1QXHFCDo+uglgPfog7A
TLSH
AFF041E3B3241231E33083F56960BDB5474442060B3F25749228D455B4382D2D7A8149
3 malicious · 3 files
ZIP61b7825c02143616cb644f420adb5146T1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKDOC-OXA3E5.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
arc:zip>lnk~T1059.003~T1202~T1204.002
Shape
arc:zip>lnk
malicious
2 nodes
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential3 malicious · 3 files
ZIP61b7825c02143616cb644f420adb5146T1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKDOC-OXA3E5.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
No malware configuration was found at this point.
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
61b7825c02143616cb644f420adb5146 › DOC-OXA3E5.lnk
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with EssentialSign in or create a free account to view the matching YARA rules.
Create a free account