Malicious
6850c41414b2f1eefea680cff3e98194
ZIP Archive
MD5: 6850c41414b2f1eefea680cff3e98194
Size: 452 B
application/zip
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
ZIP archive
Size
452 B · 452 B
First seen
2026-08-03 11:53 · 2 months ago
Last seen
2026-08-03 11:53 · 2 months ago
Last analysis
2026-08-03 11:53 · 2 months ago
Hashes
MD5
6850c41414b2f1eefea680cff3e98194
Sha1
54320c762e24cc1af009475c8e25c6bd3e57bb09
Sha256
d828adc328489b9bac3c591297b2a1be85f939c5b79e0817de90586c7d51de41
Sha384
631bd95306197033cd10176b80a099775c2d78b66bcfeaf2bae53cff3c0683f539dba54064c702ddbb6e5d7a74d35b26
Sha512
75f44152c6d984dfa2d6c62a767fec33e7cf0672d57412a99817396113a525d00cb3fd7f243cf0158c98b06c06dca157d217484cca78b8d32be1a776c8ae5cd8
SSDeep
6:5j/Wpn/fkVKZ9cTJ2wkcxHCDVdqEgvj3PlpIghpgnk/U0VeJCozGH4jvFWpn/MtQ:5jup/d9+vVEgvA6gsU0VPtSYp/6ao0
TLSH
5BF0DC868C59D02AD9C1D6F601306A895028DE39530F64D6025C88C498E93039911626
3 malicious · 3 files
ZIP6850c41414b2f1eefea680cff3e98194T1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKDOC-IAA3IE.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
arc:zip>lnk~T1059.003~T1202~T1204.002
Shape
arc:zip>lnk
malicious
2 nodes
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential3 malicious · 3 files
ZIP6850c41414b2f1eefea680cff3e98194T1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKDOC-IAA3IE.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
No malware configuration was found at this point.
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
6850c41414b2f1eefea680cff3e98194 › DOC-IAA3IE.lnk
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with EssentialSign in or create a free account to view the matching YARA rules.
Create a free account