Malicious
9539f0b8f89886fca4209a64140ec162
ZIP Archive
MD5: 9539f0b8f89886fca4209a64140ec162
Size: 571 B
application/zip
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
ZIP archive
Size
571 B · 571 B
First seen
2026-08-03 13:26 · 2 months ago
Last seen
2026-08-03 13:26 · 2 months ago
Last analysis
2026-08-03 13:26 · 2 months ago
Hashes
MD5
9539f0b8f89886fca4209a64140ec162
Sha1
bad539337815b4080befcbec51b897c00156ab84
Sha256
1f0d3c4ffe221b068ef0b84d988f456d48f7e2039e429c7e5eddfcc12fcc6f92
Sha384
3baadcc55bf3747495a81a05731448dd8d918ebc5ba45fc650a7d96eef984d1a549a02175d15628c8cc5c7d9a8841e1a
Sha512
c3c57aa781d908c5bed0b8d974d9f7aee4883e4d4992ad9c95622402d54ea6d0983e4b05be5ac4f3bbc74a3a9c84923cba35538c0a63a3e5d5d3b7e5e962a1c0
SSDeep
12:5jACGvaqqREytENZzd5n+J9s9ytvr/Zqb6wZzNBuCLao1n:9AZaZREnj+Y9y5rAzNBu41n
TLSH
26F0206257225411D80E5075FA3638F58FF08A6D906F0F623075F9A32CB0E746EE8CB8
3 malicious · 3 files
ZIP9539f0b8f89886fca4209a64140ec162T1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKDOC-2443B4.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
arc:zip>lnk~T1059.003~T1202~T1204.002
Shape
arc:zip>lnk
malicious
2 nodes
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential3 malicious · 3 files
ZIP9539f0b8f89886fca4209a64140ec162T1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKDOC-2443B4.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
No malware configuration was found at this point.
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
9539f0b8f89886fca4209a64140ec162 › DOC-2443B4.lnk
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with EssentialSign in or create a free account to view the matching YARA rules.
Create a free account