Malicious
Malicious

8f1247f314cec3b3e5d3dd649446b317

ZIP Archive
MD5: 8f1247f314cec3b3e5d3dd649446b317
Size: 592 B
application/zip
Ctrl + scroll to zoom · drag to pan

This sample is a 592 bytes ZIP Archive classified as malicious by Malva.RE (lolbin). Static analysis extracted 2 embedded or derived files. It matches 1 YARA rule. Observed behaviours map to MITRE ATT&CK T1059.003, T1202: INDIRECT COMMAND EXECUTION and T1204.002. The file was analysed statically: it was parsed and decompiled, never executed.

SHA256
4081faa4297dd22a695b763452113f1432e7447bf7abc6555ce4e96b98150a90
MD5
8f1247f314cec3b3e5d3dd649446b317
Verdict
Malicious
File type
ZIP Archive · 592 bytes
Category
LOLBin

Cite this report: https://app.malva.re/sha256/4081faa4297dd22a695b763452113f1432e7447bf7abc6555ce4e96b98150a90

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential

File
Type
ZIP archive
Size
592 B · 592 B
First seen
2026-08-04 08:03 · 2 months ago
Last seen
2026-08-04 08:03 · 2 months ago
Last analysis
2026-08-04 08:03 · 2 months ago
Hashes
MD5 8f1247f314cec3b3e5d3dd649446b317 Sha1 94447e35a908f06e779e179c1943e9fe38617be5 Sha256 4081faa4297dd22a695b763452113f1432e7447bf7abc6555ce4e96b98150a90 Sha384 1949e62e785f48bbc3973416db7ca7e5ad6a5453d377df3d00b6552c4412db7a7d7e6438310a0b91df98c05399cb772b Sha512 b0bcf7329c4cdbb9a8e8b0cae3e68160245207d9f9ce521a959f6cfda8341e80034e3746f336916d6ed32e430bb9aaed646b0cc6dad34960a882d375aa72c3ad SSDeep 12:5juHGMu271j7fA5vmsGgecMEPfkmsOR3akkm+dF4H+aoAt:9sGMugXARmsGHc1Pfk+RpkbdF6uA TLSH 86F096B38B0B2004D92F9D7A1DDE600B0740B042E20EBE24DAC0F94B4263E20C5E042B

3 malicious · 3 files
ZIP8f1247f314cec3b3e5d3dd649446b317LOLBin
LNKDOC-0WTI3B.lnkLOLBin
BIN[Lnk Summary]
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
Path arc:zip>lnk~T1059.003~T1202~T1204.002
Shape arc:zip>lnk
malicious 2 nodes

LNK: Command Execution UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential

3 malicious · 3 files
ZIP8f1247f314cec3b3e5d3dd649446b317LOLBin
LNKDOC-0WTI3B.lnkLOLBin
BIN[Lnk Summary]
No malware configuration was found at this point.

LNK: Command Execution UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
8f1247f314cec3b3e5d3dd649446b317 › DOC-0WTI3B.lnk
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential
Sign in or create a free account to view the matching YARA rules. Create a free account
An error has occurred. This application may no longer respond until reloaded. Reload 🗙