Malicious
648b3e535dd821f053d1fd4a56e3c4a8
ZIP Archive
MD5: 648b3e535dd821f053d1fd4a56e3c4a8
Size: 577 B
application/zip
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
ZIP archive
Size
577 B · 577 B
First seen
2026-08-03 13:08 · 2 months ago
Last seen
2026-08-03 13:08 · 2 months ago
Last analysis
2026-08-03 13:08 · 2 months ago
Hashes
MD5
648b3e535dd821f053d1fd4a56e3c4a8
Sha1
7d11e57622effa2cd27a2d7ddc0a67af29369074
Sha256
09f11b5a397bf7c1a415a1687e829e093824da1d90fc16764fbe072be86a58ff
Sha384
cdf7f017370f987f77a20e05de70b1c26ced776baf77cd9dccbc8da3ff05e4efa5bf91b0e8a41900c4a9fcdecf587df0
Sha512
c730cfc4d63bed1617ffa192a9c7f3a31c8d9f475c896afce53a61a21322d6c48b47e9e6cab6bfb61071bcd236ecbd24cd65721c1a19351baa7215cd05ebdacb
SSDeep
12:5jU327MIcrMfy+F2dLQUcBUlwmGy8W6CYCN0t9JzamBWiiaov:9827MIcW5F2RoBUl3B6m67BBQv
TLSH
F9F02636C3A6165CE612843478632305550B5F81055B39F1B11FF5739939AE0BC58374
3 malicious · 3 files
ZIP648b3e535dd821f053d1fd4a56e3c4a8T1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKDOC-REL9OW.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
arc:zip>lnk~T1059.003~T1202~T1204.002
Shape
arc:zip>lnk
malicious
2 nodes
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential3 malicious · 3 files
ZIP648b3e535dd821f053d1fd4a56e3c4a8T1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKDOC-REL9OW.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
No malware configuration was found at this point.
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
648b3e535dd821f053d1fd4a56e3c4a8 › DOC-REL9OW.lnk
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with EssentialSign in or create a free account to view the matching YARA rules.
Create a free account