Malicious
6f9038d23ca07745466ed4ac717aaab4
ZIP Archive
MD5: 6f9038d23ca07745466ed4ac717aaab4
Size: 584 B
application/zip
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
ZIP archive
Size
584 B · 584 B
First seen
2026-08-03 11:24 · 2 months ago
Last seen
2026-08-03 11:24 · 2 months ago
Last analysis
2026-08-03 11:24 · 2 months ago
Hashes
MD5
6f9038d23ca07745466ed4ac717aaab4
Sha1
94e3979342f9a890bb9f650a6dbbc1fa6809e0e3
Sha256
6c92e6f256dc3e49a0f2924d945673d78af2d490b9f51d21accc6bfd21a64262
Sha384
16d166202d407c2a77c8aea557a200c4e4aca1f390e71a0feb977983d651b5a6d20aca6c8668f7b560aa673b67ec1c39
Sha512
1f39335a44769de18298cfba0c7c7304becb42c5b7066494eb6839386463e4189946c1b9613c98d9b4d2f2743fe7b284157830969eb495b9261c4c2c4278cf4f
SSDeep
12:5jilTE20vIMnBYYqnf0nC9qEWIkjNNUThTZ1gn3ySznQlzaoo:9ilf0vVnBGIq+IkjwJZ1vS7Qllo
TLSH
99F04133400DBBA5E2919130CCBA312D612D0182931F47900166E6A769C225A0F6E402
3 malicious · 3 files
ZIP6f9038d23ca07745466ed4ac717aaab4T1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKDOC-NWWPG2.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
arc:zip>lnk~T1059.003~T1202~T1204.002
Shape
arc:zip>lnk
malicious
2 nodes
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential3 malicious · 3 files
ZIP6f9038d23ca07745466ed4ac717aaab4T1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKDOC-NWWPG2.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
No malware configuration was found at this point.
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
6f9038d23ca07745466ed4ac717aaab4 › DOC-NWWPG2.lnk
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with EssentialSign in or create a free account to view the matching YARA rules.
Create a free account