Malicious
992f86851b1ef9be629c937c1ff84690
ZIP Archive
MD5: 992f86851b1ef9be629c937c1ff84690
Size: 580 B
application/zip
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
ZIP archive
Size
580 B · 580 B
First seen
2026-08-03 13:06 · 2 months ago
Last seen
2026-08-03 13:06 · 2 months ago
Last analysis
2026-08-03 13:06 · 2 months ago
Hashes
MD5
992f86851b1ef9be629c937c1ff84690
Sha1
df99cc2f81352b0e1a8a7523646d0837432e4d3f
Sha256
2fe7a66d2c8469d4a0b418e21db74f66992c648bf75c0c83f8b20ded74eb6d7b
Sha384
8277324001e89b6d164df3e16fcce9bfbe74eca8345e663887bc7dcc83e9cc4dde7796c2c2e652153560940f9ad4eefa
Sha512
415a11d9f7ea8bff37f235c62172ed494a87f731b56a26b1854a710b8b524ba0bf2bd6f6ae227e78a252c0fac5e430c66598c14ba209a94d411dc0da12af1b8c
SSDeep
12:5jfjlj81nRjrHyQgM2r9mXoMKOpTAmMjq/XNYgxvsRunD4MeHgg2ESo7pjljcao0:9VcRfD52rcXRxpkIZSRuDkZ227TI0
TLSH
B7F0E1A242709731C35678BC2D6662C97518E1DB074F3E8B1936F7C438A5ACA2D9C4A2
3 malicious · 3 files
ZIP992f86851b1ef9be629c937c1ff84690T1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKDOC-2WMLG7.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
arc:zip>lnk~T1059.003~T1202~T1204.002
Shape
arc:zip>lnk
malicious
2 nodes
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential3 malicious · 3 files
ZIP992f86851b1ef9be629c937c1ff84690T1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKDOC-2WMLG7.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
No malware configuration was found at this point.
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
992f86851b1ef9be629c937c1ff84690 › DOC-2WMLG7.lnk
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with EssentialSign in or create a free account to view the matching YARA rules.
Create a free account