Malicious
Malicious

68a1a83afc2fa42a8c237d0e73cd5065

ZIP Archive
MD5: 68a1a83afc2fa42a8c237d0e73cd5065
Size: 597 B
application/zip

This sample is a 597 bytes ZIP Archive for which Malva.RE's static analysis did not establish a malicious verdict. Static analysis extracted 2 embedded or derived files. It matches 1 YARA rule. Observed behaviours map to MITRE ATT&CK T1059.003, T1202: INDIRECT COMMAND EXECUTION and T1204.002. The file was analysed statically: it was parsed and decompiled, never executed.

SHA256
0b3f0e95f93aabdf61d904d06676ef80c3ba764bf7bc6df5473db393dcdc35c5
MD5
68a1a83afc2fa42a8c237d0e73cd5065
Verdict
Malicious
File type
ZIP Archive · 597 bytes
Category
LOLBin

Cite this report: https://app.malva.re/sha256/0b3f0e95f93aabdf61d904d06676ef80c3ba764bf7bc6df5473db393dcdc35c5

Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential

File
Type
ZIP archive
Size
597 B · 597 B
First seen
2026-08-04 08:35 · 2 months ago
Last seen
2026-08-04 08:35 · 2 months ago
Last analysis
2026-08-04 08:35 · 2 months ago
Hashes
MD5 68a1a83afc2fa42a8c237d0e73cd5065 Sha1 4ddf148757545a7e943a351f33079311694df0f2 Sha256 0b3f0e95f93aabdf61d904d06676ef80c3ba764bf7bc6df5473db393dcdc35c5 Sha384 35e1c5862b821bd7e3873b7add688fa151903b329e1ed1dabe9f181c2bd37fdb4dd4a047f33d17281f91e56fdcaedd3b Sha512 bf6f565e3fa1e6a67a8af5822feeaa865c925728c61b6c98423956d6320d95828634c503b2a988bbd2f9f7f6f15b8d51463f1cabaa4be4dcbe499538c490e96e SSDeep 12:5j+XIqLiqU2+IYgURNgecVYW4Qr19kHyhDluqOUve5ZHshZJk4F4ViaoQ/:9+X9LE2lYgURxrW/24D8/XjwtF4VCQ TLSH 12F047714124C812DB365E71DC3A3E77013C4442440F0676C08CFC59712F946A426B62

3 malicious · 3 files
ZIP68a1a83afc2fa42a8c237d0e73cd5065LOLBin
LNKDOC-8Q2EF1.lnkLOLBin
BIN[Lnk Summary]
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
Path arc:zip>lnk~T1059.003~T1202~T1204.002
Shape arc:zip>lnk
malicious 2 nodes

LNK: Command Execution UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential

3 malicious · 3 files
ZIP68a1a83afc2fa42a8c237d0e73cd5065LOLBin
LNKDOC-8Q2EF1.lnkLOLBin
BIN[Lnk Summary]
No malware configuration was found at this point.

LNK: Command Execution UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
68a1a83afc2fa42a8c237d0e73cd5065 › DOC-8Q2EF1.lnk
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential
Sign in or create a free account to view the matching YARA rules. Create a free account
An error has occurred. This application may no longer respond until reloaded. Reload 🗙