Malicious
99e9057a97f3e43207c6a454504079e1
ZIP Archive
MD5: 99e9057a97f3e43207c6a454504079e1
Size: 961 B
application/zip
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
ZIP archive
Size
961 B · 961 B
First seen
2026-08-04 08:25 · 2 months ago
Last seen
2026-08-04 08:25 · 2 months ago
Last analysis
2026-08-04 08:25 · 2 months ago
Hashes
MD5
99e9057a97f3e43207c6a454504079e1
Sha1
bafc60b9b5cc7bf77174108f52af46b861070900
Sha256
b8d82a9b34f9a6790338fcd784bd01793489c4dd2a9bd1a16ee02554b6048cc7
Sha384
21d3cf312a472c765e07abe8c15851a26855deadafeb9d1afafa5a71ddedf017f018d9c46199b5869123e68542ab322a
Sha512
4f5fae54d67bbe894a1fbd6528b440eeb38eb9cb12ea17f6512c265e60ebc21db8ac862ed0e88626bff3decb2f627ded2de1a0acf29e6fe3e4cb35c6a4641e98
SSDeep
24:93zAMTrUYMQRODN5z/ozlFg0NBYc2RlyN:9jJXbMCODaFgOBX2RlyN
TLSH
7E1154840A028EAFDB02E5F7C426759CA74472C6771BC2977054A1F157A906F8E487AE
3 malicious · 3 files
ZIP99e9057a97f3e43207c6a454504079e1T1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKDOC-NDATK5.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
arc:zip>lnk~T1059.003~T1202~T1204.002
Shape
arc:zip>lnk
malicious
2 nodes
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential3 malicious · 3 files
ZIP99e9057a97f3e43207c6a454504079e1T1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKDOC-NDATK5.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
No malware configuration was found at this point.
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
99e9057a97f3e43207c6a454504079e1 › DOC-NDATK5.lnk
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with EssentialSign in or create a free account to view the matching YARA rules.
Create a free account