Malicious
ZIP Archive
MD5: aa8c13e4fddeda087403445aa589b4c6
Size: 591 B
application/zip
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
ZIP archive
Size
591 B · 591 B
First seen
2026-08-03 11:29 · 2 months ago
Last seen
2026-08-03 11:29 · 2 months ago
Last analysis
2026-08-03 11:29 · 2 months ago
Hashes
MD5
aa8c13e4fddeda087403445aa589b4c6
Sha1
8c1259535b0237dd50b320e5b9ed10b95be97889
Sha256
a86466170d64575ac63700f6db021d0704933a02df61164860132ca04d27f212
Sha384
e16e70a5c8c6e73ee7ac182f2f0b0d3fa510d711e10f1aaf03f27d177b232bc4dfcddd2e181079c77d6add8733c9de96
Sha512
ba07df6302807f656be8f7ebfec22884fd0aa7949bf15980669180310fd51cb8a92289be39a8e376ddf72e068ffd5e92aec173fdb1a048addd67e9ef44eb73a6
SSDeep
12:5ju3oBk8TIqKUnIPgX6+PY2zkhu3iW2shDM20mRc0sT1k7pPaox/:9u3KkZU8g6+PYDEh0x0I2pRx/
TLSH
88F096F1330B1402D3C5BDF7BF43977541207CFE62861F6508A7E79094A144335A8001
3 malicious · 3 files
ZIPaa8c13e4fddeda087403445aa589b4c6T1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKDOC-5LPU2Y.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
arc:zip>lnk~T1059.003~T1202~T1204.002
Shape
arc:zip>lnk
malicious
2 nodes
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential