Malicious
70ca949ae0e7807ed3064c974b82da64
ZIP Archive
MD5: 70ca949ae0e7807ed3064c974b82da64
Size: 593 B
application/zip
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
ZIP archive
Size
593 B · 593 B
First seen
2026-08-03 12:09 · 2 months ago
Last seen
2026-08-03 12:09 · 2 months ago
Last analysis
2026-08-03 12:09 · 2 months ago
Hashes
MD5
70ca949ae0e7807ed3064c974b82da64
Sha1
12d64295f1d6b7c695bc64c6e8b8284b4f038bd8
Sha256
63312eeac0d02ea141400d423c9d22338c1ad49cdd1f4573d88bfdfa0daa07ff
Sha384
2325d549a49761b5506b766b4cd0e005d39684d7dbdcc7686d306d28c517f563e6223f149cf8d3e485eb2048a82f9671
Sha512
5278b66d21d3d67209d2696ebe6b52f601c026bdae351e1a198a50bd1d6b445843e3002201b7e1f0f28f8af4cb810e40b79eb87a29257dffc6fdef2e1ef59935
SSDeep
12:5jAsJUbw9MmDCMwAUP3cWFm9TTGrO3lWmELLO5LR3oN4dzf9jTG9Z7isJplac:9TJUbbFMePxm9TTGrGWmEyoNyzf9vG9T
TLSH
6CF0E1D7857AFB1DC84848F032AD423A097C6BC52F43019EC96CE45A29952DB97D6181
3 malicious · 3 files
ZIP70ca949ae0e7807ed3064c974b82da64T1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKLeXNET-DOC-RVOTIP.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
arc:zip>lnk~T1059.003~T1202~T1204.002
Shape
arc:zip>lnk
malicious
2 nodes
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential3 malicious · 3 files
ZIP70ca949ae0e7807ed3064c974b82da64T1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKLeXNET-DOC-RVOTIP.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
No malware configuration was found at this point.
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
70ca949ae0e7807ed3064c974b82da64 › LeXNET-DOC-RVOTIP.lnk
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with EssentialSign in or create a free account to view the matching YARA rules.
Create a free account