Malicious
99890f1cc754ea447b226d09e3ab8b58
ZIP Archive
MD5: 99890f1cc754ea447b226d09e3ab8b58
Size: 598 B
application/zip
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
ZIP archive
Size
598 B · 598 B
First seen
2026-08-03 12:18 · 2 months ago
Last seen
2026-08-03 12:18 · 2 months ago
Last analysis
2026-08-03 12:18 · 2 months ago
Hashes
MD5
99890f1cc754ea447b226d09e3ab8b58
Sha1
2ca0d75c7df0e0091c164fad179bfb0efaeba897
Sha256
1fb1786fa866ef4d57a27f77aeabfe2983cab0a938a5e71191032e347d71b9d3
Sha384
2b534f2541bc5bc7b1f859d9a20534e1016f230211cc3484f4e73dd9d0b6b9a7425be706546b2bea789bfca21c9de084
Sha512
4f2a99b81a1daddb322df9a0e1d6de400913b83ad454a9b358686c80196cc26adea2af31b3b177d5dc3000620dc907706e0816d53ddcb09c8310eb031f76eb87
SSDeep
12:5jVl4YlBArj8o1F5ixmcDcIACXiAmapTuA/JGvBImticTl7aKE/:9VtK/pv5UoIACF9uAhuBVicTY/
TLSH
ECF0020570EE3ADCE1008EF12C8ADD07DF5346D673E92C2DA39C80511B51969CD938B0
3 malicious · 3 files
ZIP99890f1cc754ea447b226d09e3ab8b58T1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKLeXNET-DOC-EINV65.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
arc:zip>lnk~T1059.003~T1202~T1204.002
Shape
arc:zip>lnk
malicious
2 nodes
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential3 malicious · 3 files
ZIP99890f1cc754ea447b226d09e3ab8b58T1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKLeXNET-DOC-EINV65.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
No malware configuration was found at this point.
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
99890f1cc754ea447b226d09e3ab8b58 › LeXNET-DOC-EINV65.lnk
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with EssentialSign in or create a free account to view the matching YARA rules.
Create a free account