Malicious
Malicious

926c3902432681abdc244951b3a57be5

ZIP Archive
MD5: 926c3902432681abdc244951b3a57be5
Size: 581 B
application/zip

This sample is a 581 bytes ZIP Archive for which Malva.RE's static analysis did not establish a malicious verdict. Static analysis extracted 2 embedded or derived files. It matches 1 YARA rule. Observed behaviours map to MITRE ATT&CK T1059.003, T1202: INDIRECT COMMAND EXECUTION and T1204.002. The file was analysed statically: it was parsed and decompiled, never executed.

SHA256
743347ac838dd6a704260ef80c8888a40bae3a9758029ca47a1d9a3da6dae767
MD5
926c3902432681abdc244951b3a57be5
Verdict
Malicious
File type
ZIP Archive · 581 bytes
Category
LOLBin

Cite this report: https://app.malva.re/sha256/743347ac838dd6a704260ef80c8888a40bae3a9758029ca47a1d9a3da6dae767

Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential

File
Type
ZIP archive
Size
581 B · 581 B
First seen
2026-08-03 12:42 · 2 months ago
Last seen
2026-08-03 12:42 · 2 months ago
Last analysis
2026-08-03 12:42 · 2 months ago
Hashes
MD5 926c3902432681abdc244951b3a57be5 Sha1 8615ea3e3957392480e8f07567dc1c1f639fd7ac Sha256 743347ac838dd6a704260ef80c8888a40bae3a9758029ca47a1d9a3da6dae767 Sha384 fd2bfe4599858a789fb1bf670a7f6e83163019408176ee9d047689a381fe686352153fa34162c92cfa9b02a2d15735bd Sha512 390f7eb3ba003e79288efe80bbad565cf2958d4c64317e30ce87449ec2b530691b8df60f70bbdda6830abb83fb9724bd58b409c613e118f6d1dda213536cee54 SSDeep 12:5jshAobf6xi98z1kg4Tmq0P4jb6K9ieF53ylLUVNT8SBqhADaoT:9shAgf6rlBOV1FlYkGwqhA1T TLSH C8F096E951325FC3C95A51F8DDAF7349A08C002C8239B1063AB3E9174C846847E883F1

3 malicious · 3 files
ZIP926c3902432681abdc244951b3a57be5LOLBin
LNKDOC-NLE9S6.lnkLOLBin
BIN[Lnk Summary]
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
Path arc:zip>lnk~T1059.003~T1202~T1204.002
Shape arc:zip>lnk
malicious 2 nodes

LNK: Command Execution UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential

3 malicious · 3 files
ZIP926c3902432681abdc244951b3a57be5LOLBin
LNKDOC-NLE9S6.lnkLOLBin
BIN[Lnk Summary]
No malware configuration was found at this point.

LNK: Command Execution UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
926c3902432681abdc244951b3a57be5 › DOC-NLE9S6.lnk
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential
Sign in or create a free account to view the matching YARA rules. Create a free account
An error has occurred. This application may no longer respond until reloaded. Reload 🗙