Malicious
Malicious

a3a0a876921967cd0a5f356389048894

ZIP Archive
MD5: a3a0a876921967cd0a5f356389048894
Size: 953 B
application/zip
Ctrl + scroll to zoom · drag to pan

This sample is a 953 bytes ZIP Archive classified as malicious by Malva.RE (lolbin). Static analysis extracted 2 embedded or derived files. It matches 1 YARA rule. Observed behaviours map to MITRE ATT&CK T1059.003, T1202: INDIRECT COMMAND EXECUTION and T1204.002. The file was analysed statically: it was parsed and decompiled, never executed.

SHA256
10d6b9d89a7f35e8606a95e1acd11b53091fa6e6c998a7a9477d1a46d5c852ee
MD5
a3a0a876921967cd0a5f356389048894
Verdict
Malicious
File type
ZIP Archive · 953 bytes
Category
LOLBin

Cite this report: https://app.malva.re/sha256/10d6b9d89a7f35e8606a95e1acd11b53091fa6e6c998a7a9477d1a46d5c852ee

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential

File
Type
ZIP archive
Size
953 B · 953 B
First seen
2026-08-04 08:36 · 2 months ago
Last seen
2026-08-04 08:36 · 2 months ago
Last analysis
2026-08-04 08:36 · 2 months ago
Hashes
MD5 a3a0a876921967cd0a5f356389048894 Sha1 938e071bf5355c4bdd3138fca8d64678a508c332 Sha256 10d6b9d89a7f35e8606a95e1acd11b53091fa6e6c998a7a9477d1a46d5c852ee Sha384 c78bd6211daf5466131807fdae91bc00c80484daeff1848997eb0c2d07e58fd6624215b484c85a96a3fec7c9b72c896f Sha512 6f4219041827ce1f940cb1f815dfc3eb45f4d092ced23759cec253c85583bdf77c1a45e2a702f13d3f9b125d8aa769f31b29f54c4c3e0d7f2cfb07fe738dd7c7 SSDeep 24:9rQKqP1T6rfprG3DXsJpx/YhIZdQYgQlQS1:9sCrp+Lsw8IQ6S1 TLSH 8F11B71628A06FC7F70145BE8707748BE4952483D855EB4238D0BFC57F90DDDFA1A500

3 malicious · 3 files
ZIPa3a0a876921967cd0a5f356389048894LOLBin
LNKDOC-JE580H.lnkLOLBin
BIN[Lnk Summary]
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
Path arc:zip>lnk~T1059.003~T1202~T1204.002
Shape arc:zip>lnk
malicious 2 nodes

LNK: Command Execution UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential

3 malicious · 3 files
ZIPa3a0a876921967cd0a5f356389048894LOLBin
LNKDOC-JE580H.lnkLOLBin
BIN[Lnk Summary]
No malware configuration was found at this point.

LNK: Command Execution UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
a3a0a876921967cd0a5f356389048894 › DOC-JE580H.lnk
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential
Sign in or create a free account to view the matching YARA rules. Create a free account
An error has occurred. This application may no longer respond until reloaded. Reload 🗙