Malicious
a8ed489438e23c1282d9f3cfaea26900
ZIP Archive
MD5: a8ed489438e23c1282d9f3cfaea26900
Size: 587 B
application/zip
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
ZIP archive
Size
587 B · 587 B
First seen
2026-08-03 11:12 · 2 months ago
Last seen
2026-08-03 11:12 · 2 months ago
Last analysis
2026-08-03 11:12 · 2 months ago
Hashes
MD5
a8ed489438e23c1282d9f3cfaea26900
Sha1
91aae44e6694bfbfd4158bde8cfb928f2d3974af
Sha256
f664b07bfa142e7e35ca487a0fe7dcbcaf4b1716e2708fd95080bf3285672c4e
Sha384
a7a847856d202f0eac7f7b5b2f619a8b55e99824e2faff20f53360e5b11ab954c4acaad7d01d8cd2ae8b274208c6874e
Sha512
3152341ef2140c6b4050b21e343dbe8c39b0be78cbf720b29fe9a75ade33345cad4c1a254630a195cf6233d81741a57ec069f3adf94822b5037f894892101426
SSDeep
12:5j7sGfCGPgLfVMVG4DgXVRYqML8eebbDHD0mz5XeiPKdBMArbzacRsGHJaol:97FN4LNMdg7YRL8eefDj0mz51Kd6Afn5
TLSH
ABF041B411C2610CE480E4F27123319BD7B2C5450A4A96B142BE4DCDE8039C0370A562
3 malicious · 3 files
ZIPa8ed489438e23c1282d9f3cfaea26900T1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKDOC-A61QD2.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
arc:zip>lnk~T1059.003~T1202~T1204.002
Shape
arc:zip>lnk
malicious
2 nodes
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential3 malicious · 3 files
ZIPa8ed489438e23c1282d9f3cfaea26900T1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKDOC-A61QD2.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
No malware configuration was found at this point.
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
a8ed489438e23c1282d9f3cfaea26900 › DOC-A61QD2.lnk
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with EssentialSign in or create a free account to view the matching YARA rules.
Create a free account