Malicious
ZIP Archive
MD5: a4f5ffb1b2a7cfa2dcb00f6ed4c4e4c7
Size: 810 B
application/zip
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
ZIP archive
Size
810 B · 810 B
First seen
2026-08-03 13:24 · 2 months ago
Last seen
2026-08-03 13:24 · 2 months ago
Last analysis
2026-08-03 13:24 · 2 months ago
Hashes
MD5
a4f5ffb1b2a7cfa2dcb00f6ed4c4e4c7
Sha1
7c0f4b69c545edc5842b62a8937fb35fe2bf1283
Sha256
9a2cffa733e4f428ad8ffa2ac4b3d10db8a07cc74b9e61b53283914672a2d412
Sha384
2dc1e79d888d300f4a1c74361bb4b66170f613c235c59fd330e6f768009e6e77774a73d254741a58f8053c1d6b9e7e1f
Sha512
d8a1ebb57aa6cd0c9a3f2fded3a247b8f9ebc0f531fcecc14bab95ac5a9fe2ad1247520a3c37135ddd377ddc3f17fd91bcb3c4422486b5deb8903352dda6af8f
SSDeep
24:9kJJk/W5XEXX+/pyhjeawefVg8Kqi5vnPV:9kfkedU+xyhjIe2lhnPV
TLSH
95017577B1944216F5060C79880C776ED8DA40B2E129B7BEB5E1E14506C9A323195A19
3 malicious · 3 files
ZIPa4f5ffb1b2a7cfa2dcb00f6ed4c4e4c7T1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKDOC-SBHOHQ.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
arc:zip>lnk~T1059.003~T1202~T1204.002
Shape
arc:zip>lnk
malicious
2 nodes
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential