Malicious
Malicious

93df3f0effbaed63848ff90dbef6eb71

ZIP Archive
MD5: 93df3f0effbaed63848ff90dbef6eb71
Size: 828 B
application/zip
Ctrl + scroll to zoom · drag to pan

This sample is a 828 bytes ZIP Archive classified as malicious by Malva.RE (lolbin). Static analysis extracted 2 embedded or derived files. It matches 1 YARA rule. Observed behaviours map to MITRE ATT&CK T1059.003, T1202: INDIRECT COMMAND EXECUTION and T1204.002. The file was analysed statically: it was parsed and decompiled, never executed.

SHA256
d5f5540b3e7d43e668b208ed9fbea59e00696e18da5130f9787f7473f8132597
MD5
93df3f0effbaed63848ff90dbef6eb71
Verdict
Malicious
File type
ZIP Archive · 828 bytes
Category
LOLBin

Cite this report: https://app.malva.re/sha256/d5f5540b3e7d43e668b208ed9fbea59e00696e18da5130f9787f7473f8132597

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential

File
Type
ZIP archive
Size
828 B · 828 B
First seen
2026-08-04 08:24 · 2 months ago
Last seen
2026-08-04 08:24 · 2 months ago
Last analysis
2026-08-04 08:24 · 2 months ago
Hashes
MD5 93df3f0effbaed63848ff90dbef6eb71 Sha1 cda97614742a107084b4de64ba3d45fb0b4b0743 Sha256 d5f5540b3e7d43e668b208ed9fbea59e00696e18da5130f9787f7473f8132597 Sha384 284ee730f0f0760dee5a758ff81f0814b6444757904b708e873b9dff8f524953a73eb22594016d2f5ff0f55641939c1d Sha512 f497bf394a68c8c4097c1dd37147317953486b8d45917ec5a0a72e58cd83e72a1b9d147668dfdca63ae0cb6302dcfcc7f0ecee6c2bd2c21eff38f547a78e3ea8 SSDeep 24:9gVO5W0Tam/TJZTXH4zlEs4qLV1HemC0+D+K1JBWVbP:9gVF7mrjX4zbpZC0YBWVbP TLSH 3201CAF12742B08ED1098BF6CC5C7B068D7954347F494B9E60276B16F88237050B7344

3 malicious · 3 files
ZIP93df3f0effbaed63848ff90dbef6eb71LOLBin
LNKDOC-081Y2Q.lnkLOLBin
BIN[Lnk Summary]
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
Path arc:zip>lnk~T1059.003~T1202~T1204.002
Shape arc:zip>lnk
malicious 2 nodes

LNK: Command Execution UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential

3 malicious · 3 files
ZIP93df3f0effbaed63848ff90dbef6eb71LOLBin
LNKDOC-081Y2Q.lnkLOLBin
BIN[Lnk Summary]
No malware configuration was found at this point.

LNK: Command Execution UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
93df3f0effbaed63848ff90dbef6eb71 › DOC-081Y2Q.lnk
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential
Sign in or create a free account to view the matching YARA rules. Create a free account
An error has occurred. This application may no longer respond until reloaded. Reload 🗙