Malicious
ZIP Archive
MD5: 6d9c0368a2d381249617a345cfba3bcf
Size: 586 B
application/zip
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
ZIP archive
Size
586 B · 586 B
First seen
2026-08-03 11:06 · 2 months ago
Last seen
2026-08-03 11:06 · 2 months ago
Last analysis
2026-08-03 11:06 · 2 months ago
Hashes
MD5
6d9c0368a2d381249617a345cfba3bcf
Sha1
cac64aa2d3baa9ec1cfe3aa76cdfbbdaf4cdb8c3
Sha256
b0ef543517d770d3baa5dffc396b99a09518ce97ab2e6ea953b1d345dae52f9f
Sha384
55001dc6a430f7f6108e70b283b8b295a18d266b168ece905dd3bc5294e27e194885f8a04c2fceac55711176a1497232
Sha512
a49cf1ab13ce13bde4486f69ad65c181dde2aa2cd6a32ff83a9ea50d96167e314ba77492699ba947e4afef13f86e6f757b9b66acd52d3bea14b31534662171a0
SSDeep
12:5jCilMgdDFmNZQTx+ju5IJUrnpjq/8ufAhUxD+rcte11KdR3SnYilt1JaoSt:9CABFm0XDrnQ/7oU1NeKsYiXSt
TLSH
0FF0E7135F32D546D6E3DF3694C790396D1D61157B590F4F0469E1274A50247C9FC180
3 malicious · 3 files
ZIP6d9c0368a2d381249617a345cfba3bcfT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKDOC-2B6A2B.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
arc:zip>lnk~T1059.003~T1202~T1204.002
Shape
arc:zip>lnk
malicious
2 nodes
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential