Malicious
89b7a2f892b4dc0993e558660496e93e
ZIP Archive
MD5: 89b7a2f892b4dc0993e558660496e93e
Size: 591 B
application/zip
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
ZIP archive
Size
591 B · 591 B
First seen
2026-08-03 12:09 · 2 months ago
Last seen
2026-08-03 12:09 · 2 months ago
Last analysis
2026-08-03 12:09 · 2 months ago
Hashes
MD5
89b7a2f892b4dc0993e558660496e93e
Sha1
22de45ffa42cf30c571eafd214916079513a804e
Sha256
bd834a6958e9e68f400d3c5942bd3babd103c561b5754488b5e5d6f09dd46c34
Sha384
be66770f15d362feb479ad1650de62b6e48626abd76986c0a0178fc01444c3ae7800196a60afcfe28e4527e1971f2b6c
Sha512
e19eab2aedc94091b37d6285e676b509526aa859f7c8fca51817c275c037b11248aeb7c4b79813581b1ce983845c9cbb8ff1065b8cc981c66095b723268ddfde
SSDeep
12:5jjq2qCzv/d2zCzMZLinje73IhaBe69M7kJMJoBJq2Lviay:9jqbCR5YZAy7YknM7wBJqyvs
TLSH
85F0410B793D2BABC0188EF4312B9E3C0648CF5C92C29F854514E7E839429C30A90652
3 malicious · 3 files
ZIP89b7a2f892b4dc0993e558660496e93eT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKLeXNET-DOC-MCKAM1.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
arc:zip>lnk~T1059.003~T1202~T1204.002
Shape
arc:zip>lnk
malicious
2 nodes
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential3 malicious · 3 files
ZIP89b7a2f892b4dc0993e558660496e93eT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKLeXNET-DOC-MCKAM1.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
No malware configuration was found at this point.
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
89b7a2f892b4dc0993e558660496e93e › LeXNET-DOC-MCKAM1.lnk
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with EssentialSign in or create a free account to view the matching YARA rules.
Create a free account