Malicious
6439f5c23d7b798be0de5367de9f83f9
ZIP Archive
MD5: 6439f5c23d7b798be0de5367de9f83f9
Size: 589 B
application/zip
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
ZIP archive
Size
589 B · 589 B
First seen
2026-08-03 11:27 · 2 months ago
Last seen
2026-08-03 11:27 · 2 months ago
Last analysis
2026-08-03 11:27 · 2 months ago
Hashes
MD5
6439f5c23d7b798be0de5367de9f83f9
Sha1
7e0dcdfe70493311d917bceb12e823f2fe9ae9ce
Sha256
bd6aa69e6ff0e07f1dcc2ea1e16cdc22e692c577b77ecc7ddb53384eb433fbc0
Sha384
c2816a637563d8f7daba92495e0da130754e0fcdd0e72e1fc2a586272cd4d23db553687b6233b356ad68f75aeb909ffe
Sha512
9c7af7badd4c2905a455d46e5a03015e141df9f5643088405c4d6f70decb605fc189ae4a04c2c3b4dd08a06329571812db8f52d6a66f505528e7c0c253989891
SSDeep
12:5j3pxopIaCsFSCQD+XfRrnMe9v0rchAW5ImH/UE7Rp7H/LYKnBopYaor:98pIaCsFSKfRrMC0rchAcHjRNHzYKnBZ
TLSH
F5F0E15E177908F0CCE6E4367A232C766243978655321F0F86F1B644A7FCCB1AA21571
3 malicious · 3 files
ZIP6439f5c23d7b798be0de5367de9f83f9T1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKDOC-1KO3ER.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
arc:zip>lnk~T1059.003~T1202~T1204.002
Shape
arc:zip>lnk
malicious
2 nodes
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential3 malicious · 3 files
ZIP6439f5c23d7b798be0de5367de9f83f9T1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKDOC-1KO3ER.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
No malware configuration was found at this point.
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
6439f5c23d7b798be0de5367de9f83f9 › DOC-1KO3ER.lnk
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with EssentialSign in or create a free account to view the matching YARA rules.
Create a free account