Malicious
9b52d9e801d602cf167da4a1fdda9ff3
ZIP Archive
MD5: 9b52d9e801d602cf167da4a1fdda9ff3
Size: 931 B
application/zip
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
ZIP archive
Size
931 B · 931 B
First seen
2026-08-03 10:59 · 2 months ago
Last seen
2026-08-03 10:59 · 2 months ago
Last analysis
2026-08-03 10:59 · 2 months ago
Hashes
MD5
9b52d9e801d602cf167da4a1fdda9ff3
Sha1
a72e821fee358b8186ced809dba5ffe47d5b5c34
Sha256
881c3bcd3ec67bf8f7908c439525b1a09b2fc106ce6d0018a5d92b18453f886d
Sha384
2e8e4c9d3c43f217e4045c112bb46c05d831aaf4a72c9439980830abbf32d5b4c74b77f436ec3865c597cc043ed8fec3
Sha512
e7ef118046a59a0c0cb80e522e5813c46004b331e3633f40d38ad48d83a030f818febd5ac0849bdeeedad2e4db66b754a4fc2a6ad628f605e0ed6acb197c7b70
SSDeep
12:5juI3Q0jaTMJob9P2H4C9qxCoXqMfJf+F155ZVd35BgnJE7ijuZROSK5ROVcj7eQ:9uymb9uuxF6MhCPzbgn6ODDOVL7NiP
TLSH
C811F72E1DF7E31CF8F3CCF4C29AE0979411045040C33A2368BA93C122638585811D4C
3 malicious · 3 files
ZIP9b52d9e801d602cf167da4a1fdda9ff3T1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKDOC-8S02TX.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
arc:zip>lnk~T1059.003~T1202~T1204.002
Shape
arc:zip>lnk
malicious
2 nodes
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential3 malicious · 3 files
ZIP9b52d9e801d602cf167da4a1fdda9ff3T1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKDOC-8S02TX.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
No malware configuration was found at this point.
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
9b52d9e801d602cf167da4a1fdda9ff3 › DOC-8S02TX.lnk
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with EssentialSign in or create a free account to view the matching YARA rules.
Create a free account