Malicious
81d6fcd9bb84949d73f4eb88d2e5a9b8
ZIP Archive
MD5: 81d6fcd9bb84949d73f4eb88d2e5a9b8
Size: 582 B
application/zip
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
ZIP archive
Size
582 B · 582 B
First seen
2026-08-03 13:10 · 2 months ago
Last seen
2026-08-03 13:10 · 2 months ago
Last analysis
2026-08-03 13:10 · 2 months ago
Hashes
MD5
81d6fcd9bb84949d73f4eb88d2e5a9b8
Sha1
00fd5e259af31dfcebb4286abeb5d2a26e5cbf81
Sha256
58dca8c48b79f1ec7ad75e913cee2807f32260bb978ffcd9febb6f82e4b038ac
Sha384
5e6de3c99e6d70f936c4542975b2d4d1e19e5cea17a32f982ce99b88129d7009f063bcb92093d554ca73e18d120214ca
Sha512
89ca4567f6f7b167aee292d426536058eb851c3203ea70ae012c5e95241738e1d6ce52b5be3d750053a8339ac34bf5548f5c8317812c0dfd6601fe117da214bf
SSDeep
12:5jgHBv9MgvSlLGbsImfxxdf13rFlGeisD+vKN24jzu5wyTcV892cWHCvPaoi:9EB1rcLGbsImpdFMeDTgkup9nKCZi
TLSH
BDF0E169C510943BC354C4FC093BAB2767B7800B5053AA918E59D054C9A45EFA90A319
3 malicious · 3 files
ZIP81d6fcd9bb84949d73f4eb88d2e5a9b8T1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKDOC-4WL5BF.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
arc:zip>lnk~T1059.003~T1202~T1204.002
Shape
arc:zip>lnk
malicious
2 nodes
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential3 malicious · 3 files
ZIP81d6fcd9bb84949d73f4eb88d2e5a9b8T1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKDOC-4WL5BF.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
No malware configuration was found at this point.
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
81d6fcd9bb84949d73f4eb88d2e5a9b8 › DOC-4WL5BF.lnk
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with EssentialSign in or create a free account to view the matching YARA rules.
Create a free account