Malicious
Malicious

aa5502e405a935d0f3ae05e75fe6d84d

ZIP Archive
MD5: aa5502e405a935d0f3ae05e75fe6d84d
Size: 578 B
application/zip

This sample is a 578 bytes ZIP Archive for which Malva.RE's static analysis did not establish a malicious verdict. Static analysis extracted 2 embedded or derived files. It matches 1 YARA rule. Observed behaviours map to MITRE ATT&CK T1059.003, T1202: INDIRECT COMMAND EXECUTION and T1204.002. The file was analysed statically: it was parsed and decompiled, never executed.

SHA256
a32068579ebaca9568ad717c10f081ae9945c741095c1b6c5e0fe753a522dffd
MD5
aa5502e405a935d0f3ae05e75fe6d84d
Verdict
Malicious
File type
ZIP Archive · 578 bytes
Category
LOLBin

Cite this report: https://app.malva.re/sha256/a32068579ebaca9568ad717c10f081ae9945c741095c1b6c5e0fe753a522dffd

Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential

File
Type
ZIP archive
Size
578 B · 578 B
First seen
2026-08-03 10:33 · 2 months ago
Last seen
2026-08-03 10:33 · 2 months ago
Last analysis
2026-08-03 10:33 · 2 months ago
Hashes
MD5 aa5502e405a935d0f3ae05e75fe6d84d Sha1 bfaa4b20dfc6f64b35052b86dccaa7a278100cfb Sha256 a32068579ebaca9568ad717c10f081ae9945c741095c1b6c5e0fe753a522dffd Sha384 530a56956cfdaff665088546048311ba654f295e7573c8825f7442331a90d148149ed2f7824ec94b47a8de3a580b160f Sha512 9b5bcefad1f49071cba8244e564565923d19ca6e046c18ba9c4c118824fdd1a63882d7434dc887e332e78da4fa8cac90b473944146215e59594fffa85a005170 SSDeep 12:5jhyfD3ZdtoAPj/KPKYUyR1OLuQGBbMOpjQxPTVBUelgpoIp91M+yHzzyiaou:9UfDpPjSPZ1OyQfsjk52es9M+yTuCu TLSH FEF0E1EB444D8645C99E52FFB6771079031C4C81807A4E8116F9DE88AFE0AD99C55EA0

3 malicious · 3 files
ZIPaa5502e405a935d0f3ae05e75fe6d84dLOLBin
LNKDOC-Z9SISO.lnkLOLBin
BIN[Lnk Summary]
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
Path arc:zip>lnk~T1059.003~T1202~T1204.002
Shape arc:zip>lnk
malicious 2 nodes

LNK: Command Execution UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential

3 malicious · 3 files
ZIPaa5502e405a935d0f3ae05e75fe6d84dLOLBin
LNKDOC-Z9SISO.lnkLOLBin
BIN[Lnk Summary]
No malware configuration was found at this point.

LNK: Command Execution UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
aa5502e405a935d0f3ae05e75fe6d84d › DOC-Z9SISO.lnk
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential
Sign in or create a free account to view the matching YARA rules. Create a free account
An error has occurred. This application may no longer respond until reloaded. Reload 🗙