Malicious
9f1f5c11464b53c6d4b1360cc5a3553a
ZIP Archive
MD5: 9f1f5c11464b53c6d4b1360cc5a3553a
Size: 581 B
application/zip
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
ZIP archive
Size
581 B · 581 B
First seen
2026-08-03 12:14 · 2 months ago
Last seen
2026-08-03 12:14 · 2 months ago
Last analysis
2026-08-03 12:14 · 2 months ago
Hashes
MD5
9f1f5c11464b53c6d4b1360cc5a3553a
Sha1
940d706b31ee84cf5d21ff9deae1ee9ee2796900
Sha256
e4841ee6825cb84b9c360dd162179e1df5559068eb1ddbc4036c19fc5c65d578
Sha384
de6084d35fa1b1ecb0033c831247add169c0a12d8ec7418c98a9d4f6a39d6edc5296d9994173ee9bf6a08f58a20b6f84
Sha512
ac0ccaa2c45b5900d9a26c88c810f78833f4a3f068ccf7e3266e73bdbbb4f31781d08b37dfdfc16aa502b08c5697efeb860ad5243726d7bb773cbb4a260a6241
SSDeep
12:5jzUR+PA/DEuB4fLysWw2G5mjpCpVK/QMMdwHJZId3JaA:9Y4puBKLysGum8jdMMwYB
TLSH
87F0202086EB2CC2CD6344FA801FB4DE1FA181FE2BEB616303AC00010456111BF1178A
3 malicious · 3 files
ZIP9f1f5c11464b53c6d4b1360cc5a3553aT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKPDFDOC-TCNKXZ.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
arc:zip>lnk~T1059.003~T1202~T1204.002
Shape
arc:zip>lnk
malicious
2 nodes
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential3 malicious · 3 files
ZIP9f1f5c11464b53c6d4b1360cc5a3553aT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKPDFDOC-TCNKXZ.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
No malware configuration was found at this point.
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
9f1f5c11464b53c6d4b1360cc5a3553a › PDFDOC-TCNKXZ.lnk
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with EssentialSign in or create a free account to view the matching YARA rules.
Create a free account