Malicious
Malicious

7738a19b43cac163abd04d221476f212

ZIP Archive
MD5: 7738a19b43cac163abd04d221476f212
Size: 969 B
application/zip

This sample is a 969 bytes ZIP Archive for which Malva.RE's static analysis did not establish a malicious verdict. Static analysis extracted 2 embedded or derived files. It matches 1 YARA rule. Observed behaviours map to MITRE ATT&CK T1059.003, T1202: INDIRECT COMMAND EXECUTION and T1204.002. The file was analysed statically: it was parsed and decompiled, never executed.

SHA256
f21da258ece711b430ad0c499198d00221ee8f8e45c265b6cf759a2a8bf6d7e7
MD5
7738a19b43cac163abd04d221476f212
Verdict
Malicious
File type
ZIP Archive · 969 bytes
Category
LOLBin

Cite this report: https://app.malva.re/sha256/f21da258ece711b430ad0c499198d00221ee8f8e45c265b6cf759a2a8bf6d7e7

Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential

File
Type
ZIP archive
Size
969 B · 969 B
First seen
2026-08-03 10:55 · 2 months ago
Last seen
2026-08-03 10:55 · 2 months ago
Last analysis
2026-08-03 10:55 · 2 months ago
Hashes
MD5 7738a19b43cac163abd04d221476f212 Sha1 d1f7d85d3e7bd18daa9c02a6fab3542019b065e9 Sha256 f21da258ece711b430ad0c499198d00221ee8f8e45c265b6cf759a2a8bf6d7e7 Sha384 b80e865a3e5a4e2374b59ef47a6f0cc0bca7887721350ceac3a79433cfcc46b32e8d588df078655ee8fcbf21aa5c9ee6 Sha512 002e1dabca094c10a7f064b5f53c2418cc7fde00946fec7573d87f4200af16559bec37a2ed1e7a582aa7b57063b2ec7e40e19b91f7646aae6aab752b0d956895 SSDeep 24:9geCUiV834LNswW/sR9h/4mVVZF2XvQNE3F4sYPt:9LCUilmwss/h/XF2/QNWYl TLSH 3211A5EA208D0D76C5A2E47BD9A8278E31212A268C4E4021F471889EF7904D28E47190

3 malicious · 3 files
ZIP7738a19b43cac163abd04d221476f212LOLBin
LNKDOC-X5TDM4.lnkLOLBin
BIN[Lnk Summary]
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
Path arc:zip>lnk~T1059.003~T1202~T1204.002
Shape arc:zip>lnk
malicious 2 nodes

LNK: Command Execution UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential

3 malicious · 3 files
ZIP7738a19b43cac163abd04d221476f212LOLBin
LNKDOC-X5TDM4.lnkLOLBin
BIN[Lnk Summary]
No malware configuration was found at this point.

LNK: Command Execution UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
7738a19b43cac163abd04d221476f212 › DOC-X5TDM4.lnk
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential
Sign in or create a free account to view the matching YARA rules. Create a free account
An error has occurred. This application may no longer respond until reloaded. Reload 🗙