Malicious
70b48ae1e2defa9bc4373bb6d350a799
ZIP Archive
MD5: 70b48ae1e2defa9bc4373bb6d350a799
Size: 591 B
application/zip
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
ZIP archive
Size
591 B · 591 B
First seen
2026-08-04 08:23 · 2 months ago
Last seen
2026-08-04 08:23 · 2 months ago
Last analysis
2026-08-04 08:23 · 2 months ago
Hashes
MD5
70b48ae1e2defa9bc4373bb6d350a799
Sha1
2ea6721b1892f98f1a4e2be0baf08b738211c050
Sha256
109fa079356aef56969f9a874769e36e23c91b40068e63a3e3f89a0fe2c4eb7f
Sha384
5cd8719e653afe43d34631a772d76411bd06687c1443c1bfeeeb239b1f02fea92cf661c2921792765943f96b9fd80241
Sha512
001ff6b06ba3e5c7e2b4f7a54eef1e60537177c2d3b95e964c617bb2ed144230a3480f92a7d112bcdb957d1186bb09f4fedede9f747b7a5e570b2951ab4bcba3
SSDeep
12:5j8aFwpIq9uG6cbx5MtOcmeQ2AyiAzxKiDLOnlCFINhQ8HQsO9aaFHaiaox/:9Dk9MQN5QOcJQ7yiAzTWnlCOQ8HKBsCZ
TLSH
1BF041311F088E0CD29F88B1E625593DA730E4CC4A8FB6E6D476C14E18A00C62C404F8
3 malicious · 3 files
ZIP70b48ae1e2defa9bc4373bb6d350a799T1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKDOC-CBFZ8U.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
arc:zip>lnk~T1059.003~T1202~T1204.002
Shape
arc:zip>lnk
malicious
2 nodes
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential3 malicious · 3 files
ZIP70b48ae1e2defa9bc4373bb6d350a799T1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKDOC-CBFZ8U.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
No malware configuration was found at this point.
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
70b48ae1e2defa9bc4373bb6d350a799 › DOC-CBFZ8U.lnk
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with EssentialSign in or create a free account to view the matching YARA rules.
Create a free account