Malicious
9ab2af54083c7dc73b0c583c589e562b
ZIP Archive
MD5: 9ab2af54083c7dc73b0c583c589e562b
Size: 592 B
application/zip
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
ZIP archive
Size
592 B · 592 B
First seen
2026-08-04 08:32 · 2 months ago
Last seen
2026-08-04 08:32 · 2 months ago
Last analysis
2026-08-04 08:32 · 2 months ago
Hashes
MD5
9ab2af54083c7dc73b0c583c589e562b
Sha1
406545e230a20d53e2326c5500c90f9c4d90cb41
Sha256
1a36324baa7ab20f67a8f0efb1a4b9e1ff899ab992984380ef61e8861a57c53f
Sha384
9923a78185f7dc881fb60164e0962661e284bc6fa1a5d96702726807caa5c0af73ea77e348427056e4886f3665035054
Sha512
9b04e2b7e1a01b019a91ebb91302d1a376d8efcfab1bd3f83160315cc62b546620c70c1f422f3b94a3c79b66f9b962ac40742db7f9872ea89ffeb1fbc301199a
SSDeep
12:5j6+IqDKsCifDy1yeWTF/l4tnpWxUsygN/U35at8a5q9Ln/viaoAt:9P9Cif+1NWT9SxpWSs763hasx3CA
TLSH
C1F041E1AA140122D91EEF30C13E01770A32E4A5410E5C2370B1E0624EFC1767B281A5
3 malicious · 3 files
ZIP9ab2af54083c7dc73b0c583c589e562bT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKDOC-RDMLY1.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
arc:zip>lnk~T1059.003~T1202~T1204.002
Shape
arc:zip>lnk
malicious
2 nodes
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential3 malicious · 3 files
ZIP9ab2af54083c7dc73b0c583c589e562bT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKDOC-RDMLY1.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
No malware configuration was found at this point.
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
9ab2af54083c7dc73b0c583c589e562b › DOC-RDMLY1.lnk
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with EssentialSign in or create a free account to view the matching YARA rules.
Create a free account