Malicious
a2daf91aa18a3cf0bc688f464298f153
ZIP Archive
MD5: a2daf91aa18a3cf0bc688f464298f153
Size: 834 B
application/zip
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
ZIP archive
Size
834 B · 834 B
First seen
2026-08-03 11:03 · 2 months ago
Last seen
2026-08-03 11:03 · 2 months ago
Last analysis
2026-08-03 11:03 · 2 months ago
Hashes
MD5
a2daf91aa18a3cf0bc688f464298f153
Sha1
19236acd1b9b911eafc6a53519709c6a42d54041
Sha256
12c64dccd07a5eb7142c73422006a35d6885e4a2983ec7fcb3c6f46280caa9d5
Sha384
52fa770051698f465268f0569381e800d19ef9d96e37cbf7f0a5e9e8fd544797712f1ec46d91135d4fcbfaaa3f57066e
Sha512
091db63423f11ca3993820df59dd69d247f44d1825391dc4e5d0f965503ccaaeeacee2bdab4a382326d4708c013850b7a2e22bbf38b0074dd7a00584b6bcb339
SSDeep
12:5jECiIAifkITL0mKXU0wKRP2ZOX/k+NKKWPDab5SproSPoC28lJxNhOk7KHLaod:9eifbHoPJ90OX/k+NMAsppo52Jxzod
TLSH
870186C4D0154502C5DB35BA50F2618B7D11B60303CBE443305BCD2B1DABAF653863A8
3 malicious · 3 files
ZIPa2daf91aa18a3cf0bc688f464298f153T1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKDOC-9U5RVM.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
arc:zip>lnk~T1059.003~T1202~T1204.002
Shape
arc:zip>lnk
malicious
2 nodes
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential3 malicious · 3 files
ZIPa2daf91aa18a3cf0bc688f464298f153T1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKDOC-9U5RVM.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
No malware configuration was found at this point.
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
a2daf91aa18a3cf0bc688f464298f153 › DOC-9U5RVM.lnk
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with EssentialSign in or create a free account to view the matching YARA rules.
Create a free account