Malicious
Malicious

6437a17d7c0fe2d77d0853f463600585

ZIP Archive
MD5: 6437a17d7c0fe2d77d0853f463600585
Size: 577 B
application/zip
Ctrl + scroll to zoom · drag to pan

This sample is a 577 bytes ZIP Archive classified as malicious by Malva.RE (lolbin). Static analysis extracted 2 embedded or derived files. It matches 1 YARA rule. Observed behaviours map to MITRE ATT&CK T1059.003, T1202: INDIRECT COMMAND EXECUTION and T1204.002. The file was analysed statically: it was parsed and decompiled, never executed.

SHA256
332a84acd7c026f78c6f79339ce9bf80865cc38fdf27106602aa82411aeef9a0
MD5
6437a17d7c0fe2d77d0853f463600585
Verdict
Malicious
File type
ZIP Archive · 577 bytes
Category
LOLBin

Cite this report: https://app.malva.re/sha256/332a84acd7c026f78c6f79339ce9bf80865cc38fdf27106602aa82411aeef9a0

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential

File
Type
ZIP archive
Size
577 B · 577 B
First seen
2026-08-03 10:34 · 2 months ago
Last seen
2026-08-03 10:34 · 2 months ago
Last analysis
2026-08-03 10:34 · 2 months ago
Hashes
MD5 6437a17d7c0fe2d77d0853f463600585 Sha1 20ae4da33b74f36fc5bfce34d81a124d63c8ca26 Sha256 332a84acd7c026f78c6f79339ce9bf80865cc38fdf27106602aa82411aeef9a0 Sha384 f576bded27db2033840378b638e7b4730dfa69b01e08e4bd0f18ba9ad5225528e10241bced0262bc82644e9813a7c8ce Sha512 8fecc6df6ed88bf40a3fb01bf3bbceb9aceeff91e70fc09146e7f023936d4354905c47da371e728caa653b4d8c258b3ccfed85f5520d52487b4b843c58a6152e SSDeep 12:5j+c9Wm0KKpbEvXqFWrR8D8i56rCWn+LGYPHmBfaov:9+vVpb5cd8qrCJGphv TLSH F2F026EB3031605DDCA38DFA0C4F3552065B77C701CF4A4266E4E90C17163444B4E17A

3 malicious · 3 files
ZIP6437a17d7c0fe2d77d0853f463600585LOLBin
LNKDOC-PHRADS.lnkLOLBin
BIN[Lnk Summary]
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
Path arc:zip>lnk~T1059.003~T1202~T1204.002
Shape arc:zip>lnk
malicious 2 nodes

LNK: Command Execution UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential

3 malicious · 3 files
ZIP6437a17d7c0fe2d77d0853f463600585LOLBin
LNKDOC-PHRADS.lnkLOLBin
BIN[Lnk Summary]
No malware configuration was found at this point.

LNK: Command Execution UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
6437a17d7c0fe2d77d0853f463600585 › DOC-PHRADS.lnk
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential
Sign in or create a free account to view the matching YARA rules. Create a free account
An error has occurred. This application may no longer respond until reloaded. Reload 🗙