Malicious
a29670ea644081569f1e986733f80a6d
ZIP Archive
MD5: a29670ea644081569f1e986733f80a6d
Size: 591 B
application/zip
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
ZIP archive
Size
591 B · 591 B
First seen
2026-08-03 12:11 · 2 months ago
Last seen
2026-08-03 12:11 · 2 months ago
Last analysis
2026-08-03 12:11 · 2 months ago
Hashes
MD5
a29670ea644081569f1e986733f80a6d
Sha1
8843443b898eb041974a65fdf45df10f4b135303
Sha256
8f7e693ef5abe92e967eed112ba24b7a395783680188a28110face67ccbb4cdb
Sha384
8c9fc842ef0f3548b22f58bacc5a0c776c21e409e5e8b197c56d3e63f442f34190301f876081f3900614b255ca6d7c71
Sha512
1e313e32572886dc155e65350abc358c3427c06a3650309b8d578ae8e843182f90f24dc5a11729c4ad06730dfbe53eb82c3cf72f081eee769a418c99b7f58d3c
SSDeep
12:5jgBTHyjQD0AFvSAgmX7Yxkp3zdhp8GRk+C3MWBOBaHyay:9gBGjY0AhF1X7cI5hp8GRkHMWBOBD
TLSH
35F0E7D6763E3F0DE411C0742952AA7407591F1351C6881A0D79E57F55B72F70AE44C9
3 malicious · 3 files
ZIPa29670ea644081569f1e986733f80a6dT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKLeXNET-DOC-TAN41N.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
arc:zip>lnk~T1059.003~T1202~T1204.002
Shape
arc:zip>lnk
malicious
2 nodes
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential3 malicious · 3 files
ZIPa29670ea644081569f1e986733f80a6dT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKLeXNET-DOC-TAN41N.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
No malware configuration was found at this point.
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
a29670ea644081569f1e986733f80a6d › LeXNET-DOC-TAN41N.lnk
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with EssentialSign in or create a free account to view the matching YARA rules.
Create a free account