Malicious
994b5decc03a47e4cbf1a69def396d8a
ZIP Archive
MD5: 994b5decc03a47e4cbf1a69def396d8a
Size: 592 B
application/zip
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
ZIP archive
Size
592 B · 592 B
First seen
2026-08-04 08:05 · 2 months ago
Last seen
2026-08-04 08:05 · 2 months ago
Last analysis
2026-08-04 08:05 · 2 months ago
Hashes
MD5
994b5decc03a47e4cbf1a69def396d8a
Sha1
57618a2a08968bf4bd6f20953b9cf8a17eb0852e
Sha256
854dc58fe99f3f082fb7b4fc10628122b6f002d67e9f63b22786f5f1f906b501
Sha384
4b899377f6dbf122c372ec7441221fc4b9bb484528db006f58ae6e46b5a9154f45bca0a95c6408ff4f56867418b21180
Sha512
5da866d188c290fcbdd6bf505977d4b0cc29c4d35152f1d6076026295cd95df0a24961f272f215171b255549939917f879956bad509938d9c4b49b2b5194bf34
SSDeep
12:5jwk7UgRO4cVKv9LoGBQ3Q0IZMFVKtnmoeq/ztBKptaoAt:9fvBcoWtICTWmo1/BBcA
TLSH
72F026D7DB054B1BF53F84F0AA92F16977107BB964090E421C5CA9626D901ED9E8A504
3 malicious · 3 files
ZIP994b5decc03a47e4cbf1a69def396d8aT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKDOC-H6H7MA.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
arc:zip>lnk~T1059.003~T1202~T1204.002
Shape
arc:zip>lnk
malicious
2 nodes
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential3 malicious · 3 files
ZIP994b5decc03a47e4cbf1a69def396d8aT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKDOC-H6H7MA.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
No malware configuration was found at this point.
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
994b5decc03a47e4cbf1a69def396d8a › DOC-H6H7MA.lnk
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with EssentialSign in or create a free account to view the matching YARA rules.
Create a free account