Malicious
ZIP Archive
MD5: a9b5e8271268bcc938e5991617b328aa
Size: 587 B
application/zip
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
ZIP archive
Size
587 B · 587 B
First seen
2026-08-03 12:41 · 2 months ago
Last seen
2026-08-03 12:41 · 2 months ago
Last analysis
2026-08-03 12:41 · 2 months ago
Hashes
MD5
a9b5e8271268bcc938e5991617b328aa
Sha1
e7ef23b1277b12c3c302e457ebc2d2453ac7b1a3
Sha256
29ebbc05ad7a1793d3fce4209c6aef8abeaa28054454452ca61fb8ef10bc5d27
Sha384
ff9e92d1f41421227545d2e0b998862acd4e1f09a44c2a1c02eeeab247bb1838cb6e9b7f21e5a0473510faa1bfadefaf
Sha512
3f9c045a95e26c7119233dfa49a8de700f9f28ff8aa2ce7e8448b6d9170f5ff84827343bb9ec5b9679e255f9aa72f3281ebcc1887186fe62d4122bf6c2181211
SSDeep
12:5jLbATt2STlmBSNkrSiqz1ofC9/+Qidvfyc0HIJBNeaol:9/Ytr4kNaSVz1T9WQuX10HIJBUl
TLSH
BCF04116A86C881BD208C0F40F5B30E603401303678C4926062EB88D18D52AA1FE51FC
3 malicious · 3 files
ZIPa9b5e8271268bcc938e5991617b328aaT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKDOC-LYL4VG.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
arc:zip>lnk~T1059.003~T1202~T1204.002
Shape
arc:zip>lnk
malicious
2 nodes
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential