Malicious
ZIP Archive
MD5: a9970e7fb3eacd4807e590f919e3c82f
Size: 588 B
application/zip
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
ZIP archive
Size
588 B · 588 B
First seen
2026-08-03 11:27 · 2 months ago
Last seen
2026-08-03 11:27 · 2 months ago
Last analysis
2026-08-03 11:27 · 2 months ago
Hashes
MD5
a9970e7fb3eacd4807e590f919e3c82f
Sha1
4d2f2c818d5edc7468bbbca3cfda6820c3f0ea64
Sha256
df3002fb83f034c2d615717327bfd7c2aabee7a1ca14fbeaf30cea5460e66cf7
Sha384
0184f4ffceddef144dc5245e86e339ce482cc85601d673554c0b875c6ef86b2f5154aa4111a783aaa0468434e5f7ec21
Sha512
2e6efdd711f583489e1350f13e59789e7aa7a975ef9ce5c092119d807a38bc17217700dc516691177bfbc651e8daeff597666f0a4bf59ad02065f7c4b5ca2f19
SSDeep
12:5j1RyEhzOn/ISm1tfga6ShQnPS50PlCOxYlqdpQ2tZVuv5iaoM:91zO/ctgohQi0PwmHZVuv5CM
TLSH
48F096D70B3D6424DB56C0762193C8D3011009EE9228EAEB613FD40C9C6125E6A8DC51
3 malicious · 3 files
ZIPa9970e7fb3eacd4807e590f919e3c82fT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKDOC-LCMXOU.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
arc:zip>lnk~T1059.003~T1202~T1204.002
Shape
arc:zip>lnk
malicious
2 nodes
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential