Malicious
71947b5bd1f3611bf2b262b4f2d5d2f8
ZIP Archive
MD5: 71947b5bd1f3611bf2b262b4f2d5d2f8
Size: 587 B
application/zip
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
ZIP archive
Size
587 B · 587 B
First seen
2026-08-03 13:37 · 2 months ago
Last seen
2026-08-03 13:37 · 2 months ago
Last analysis
2026-08-03 13:37 · 2 months ago
Hashes
MD5
71947b5bd1f3611bf2b262b4f2d5d2f8
Sha1
63b4945183b42f964bdcbf4e2eeb1965095b1a05
Sha256
6a00024f778719078d202bc23985f64478c641b5c4a4b196c7f8220ee482b956
Sha384
630e927b3a3726715cd32a2078ccd429b7603ef44c909f6942b2a5710db77c70e1d64bb005757bd475c70138ccb541fb
Sha512
2ccaf97aabd1a8e10321bd1c15c7e0403ffd0bac7e5e0a66fba1ce08471dec32247c641491788b7ad80378a408e79d0f215effce64af0a3c16a1ddafc7009aec
SSDeep
12:5jSU6fJSr63XwfaJlVbpp1J4JfZvmY7+u8LPm6kD66aol:9SU6fJV3gCNbppkJfZ+Y70DkD66l
TLSH
C6F0E1F30F095082CD13827BD8A6B354A07E14CBF407981600A2C126E8DC3E9BAE0ECD
3 malicious · 3 files
ZIP71947b5bd1f3611bf2b262b4f2d5d2f8T1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKDOC-409BN9.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
arc:zip>lnk~T1059.003~T1202~T1204.002
Shape
arc:zip>lnk
malicious
2 nodes
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential3 malicious · 3 files
ZIP71947b5bd1f3611bf2b262b4f2d5d2f8T1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKDOC-409BN9.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
No malware configuration was found at this point.
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
71947b5bd1f3611bf2b262b4f2d5d2f8 › DOC-409BN9.lnk
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with EssentialSign in or create a free account to view the matching YARA rules.
Create a free account