Malicious
a28137395623ca0a16b85658100dc8b8
ZIP Archive
MD5: a28137395623ca0a16b85658100dc8b8
Size: 856 B
application/zip
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
ZIP archive
Size
856 B · 856 B
First seen
2026-08-03 10:52 · 2 months ago
Last seen
2026-08-03 10:52 · 2 months ago
Last analysis
2026-08-03 10:52 · 2 months ago
Hashes
MD5
a28137395623ca0a16b85658100dc8b8
Sha1
c2765962d6213913eea808790e8cebe4b734e6ff
Sha256
5220b6022a6c3fc4be31211206eb341e84b3265d3f22b696978b4c2ca7437486
Sha384
b38dba442741939a4607fe458b85afc4003940a695f616dee82f8f7c62a6a815b553c56e6a31d90602589b6d84925dfb
Sha512
f50777c05b7cb95d6719f5d4e78070c7fd5fb457a9ad3c14c930a86a3692107d670da60ea77f2d17f16a2139ef6acb604e213b128d305a2945a28b578305350d
SSDeep
12:5jY6OEQlZ3+ZN5zrYKVUxxdXIwSFDbs5dT3GgbFuWo20AiRUWwOIEy4QZOoFGjOE:9Y604N54jT6IXTx4Wob1uOoN726V6
TLSH
A21186C6C6DC8BC1D9659077697186E147A9030A7332F1A72808DB405CF96C08E631AE
3 malicious · 3 files
ZIPa28137395623ca0a16b85658100dc8b8T1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKDOC-TB3TFL.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
arc:zip>lnk~T1059.003~T1202~T1204.002
Shape
arc:zip>lnk
malicious
2 nodes
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential3 malicious · 3 files
ZIPa28137395623ca0a16b85658100dc8b8T1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKDOC-TB3TFL.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
No malware configuration was found at this point.
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
a28137395623ca0a16b85658100dc8b8 › DOC-TB3TFL.lnk
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with EssentialSign in or create a free account to view the matching YARA rules.
Create a free account