Malicious
838851e35467b75ac478fb1687b46481
ZIP Archive
MD5: 838851e35467b75ac478fb1687b46481
Size: 583 B
application/zip
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
ZIP archive
Size
583 B · 583 B
First seen
2026-08-03 13:07 · 2 months ago
Last seen
2026-08-03 13:07 · 2 months ago
Last analysis
2026-08-03 13:07 · 2 months ago
Hashes
MD5
838851e35467b75ac478fb1687b46481
Sha1
0e8512591e299a785e76785031a809d0abb1daa1
Sha256
31da5861837c63506e96d22488a105c2cfaf180b98120c632ab440a33c238d77
Sha384
5e1d347f1f10c1abec9eb3c5c8d5ff17c70954f0f68fe15d42e0f235177bc16ab97c64e8071aaa0039a7dc23f6f9cef6
Sha512
3c708c71990d09b44c5edc2aa390400d0b069e6e1349f3d56544430a4715beb862f58d99021941bb003bd05e9fcb6175d6b3b1335a3d98d1c75cde9f5650d241
SSDeep
12:5jQjlGcMB+r4oa6CmlVf6afzs5novVTv9+nFYlawTg4BKiaoBn:9Qjlrkoa6l3sx6V+nOAAXrB
TLSH
E1F0E1371A04CC0EE4953170D5EB12A98C08699A0A8F4A7A17A4F9803AE288774426F8
3 malicious · 3 files
ZIP838851e35467b75ac478fb1687b46481T1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKDOC-IHZWS3.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
arc:zip>lnk~T1059.003~T1202~T1204.002
Shape
arc:zip>lnk
malicious
2 nodes
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential3 malicious · 3 files
ZIP838851e35467b75ac478fb1687b46481T1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKDOC-IHZWS3.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
No malware configuration was found at this point.
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
838851e35467b75ac478fb1687b46481 › DOC-IHZWS3.lnk
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with EssentialSign in or create a free account to view the matching YARA rules.
Create a free account