Malicious
ZIP Archive
MD5: af2398ae9e30b842575dfe321331b3c0
Size: 963 B
application/zip
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
ZIP archive
Size
963 B · 963 B
First seen
2026-08-03 10:55 · 2 months ago
Last seen
2026-08-03 10:55 · 2 months ago
Last analysis
2026-08-03 10:55 · 2 months ago
Hashes
MD5
af2398ae9e30b842575dfe321331b3c0
Sha1
7605e737417b0fd94362fe16b84c510be7f50cf0
Sha256
ca535e7dfbe69579631d71f22e24829e9d78c3095e3ab9d104b6a334ce4fe372
Sha384
823e657969fb53a224ba8bcba5ac9f8d52a9abec40aa690b93ff9804dbef2ba154e640d757efc37b26d7f293c2fa43cc
Sha512
1a850092e09a4ebc71210c6521401728926094eca65eb9f785d866a2c93de1c96fedcfb0aca5f36bdef6a2ecd5dbfa203995c08c2c86294e9350067dfd61921f
SSDeep
24:9fB56850/iFkJzR9CA8dO/c5S7bPDRgia4F5BGX/:9ptHFknTEM7HVFrGv
TLSH
2811946502A3D6ABE1AB98A41C001FA39EE82F0B449AC4270B15895483855608BCCD75
3 malicious · 3 files
ZIPaf2398ae9e30b842575dfe321331b3c0T1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKDOC-UIK28Y.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
arc:zip>lnk~T1059.003~T1202~T1204.002
Shape
arc:zip>lnk
malicious
2 nodes
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential