Malicious
685f730e041fe8d222079cc8d1ce2667
ZIP Archive
MD5: 685f730e041fe8d222079cc8d1ce2667
Size: 574 B
application/zip
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
ZIP archive
Size
574 B · 574 B
First seen
2026-08-03 10:32 · 2 months ago
Last seen
2026-08-03 10:32 · 2 months ago
Last analysis
2026-08-03 10:32 · 2 months ago
Hashes
MD5
685f730e041fe8d222079cc8d1ce2667
Sha1
ed997ab7e456af3cb9b77f60df3690962d3759ab
Sha256
3be483e8b17875d750c9a1ef86e429180233b8cb076227c6873b427f3214da67
Sha384
9526a82ff5d9a0227edc0e1d055a96e7b53b884efdae0bef38b22ae9a6461475e9b4d862f9187b348f695b1cb9ee8afb
Sha512
9a31d9907608666e5707fd8aeae0b27cdcb911d36e37ff1d93b82edafe11a3085f2a462be3287571660820deefd7e5baec1c7dcfacbccd032bde13a1daa00a05
SSDeep
12:5jrrlnlO5b7Mi7ktSGA6kSUYXwEhutDbyH7NczcdwbSlrlAuaoet:9u5fMi70s6yYduZy5czc0SLet
TLSH
CBF096A36812C00BC390A9B95BAFA3052C1D8394684E9766B33CD0D708C0F90CD9E749
3 malicious · 3 files
ZIP685f730e041fe8d222079cc8d1ce2667T1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKDOC-KOTD1J.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
arc:zip>lnk~T1059.003~T1202~T1204.002
Shape
arc:zip>lnk
malicious
2 nodes
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential3 malicious · 3 files
ZIP685f730e041fe8d222079cc8d1ce2667T1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKDOC-KOTD1J.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
No malware configuration was found at this point.
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
685f730e041fe8d222079cc8d1ce2667 › DOC-KOTD1J.lnk
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with EssentialSign in or create a free account to view the matching YARA rules.
Create a free account