Malicious
ZIP Archive
MD5: ad6881f508d8a8bb3fc6cead24c499f4
Size: 580 B
application/zip
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
ZIP archive
Size
580 B · 580 B
First seen
2026-08-03 10:50 · 2 months ago
Last seen
2026-08-03 10:50 · 2 months ago
Last analysis
2026-08-03 10:50 · 2 months ago
Hashes
MD5
ad6881f508d8a8bb3fc6cead24c499f4
Sha1
4fc6533f975b7489544bb82b55d25e71e048a59e
Sha256
00259e2b68e8767e3633c03b22148698d963dbfa2c43cc2bf8bb18a3c1d15d86
Sha384
02d75df4006c9c76d2ca38db842d59934fb8936d21f24cb608063d1ca8fca3548b29eb14629a2946cf3e5831daedd163
Sha512
766cda8fa69459fa92ae227fbad11e99a09ed0499183c6f3053dcba88461915dee9d9f81e5e3041eac6602b5881a92d0cdf2f825aa1cd4f45e69e519bb59b5da
SSDeep
12:5j8zpeaRUUAAfW70VWKVUnfZtfZu0XJXmp6S7xzZAr0cIK+pYaoct:98UarAiW70VWKEZu0XJKFzuocIKz0
TLSH
ECF026930760D50CE5B4E03CDAC9AA1E92CC766A42F8F7F50258F55D4DD99352DC6D30
3 malicious · 3 files
ZIPad6881f508d8a8bb3fc6cead24c499f4T1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKDOC-QMZ50B.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
arc:zip>lnk~T1059.003~T1202~T1204.002
Shape
arc:zip>lnk
malicious
2 nodes
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential