Malicious
Malicious

af26c25baa3be4cc619a32f91d6a27c4

ZIP Archive
MD5: af26c25baa3be4cc619a32f91d6a27c4
Size: 584 B
application/zip
Ctrl + scroll to zoom · drag to pan

This sample is a 584 bytes ZIP Archive classified as malicious by Malva.RE (lolbin). Static analysis extracted 2 embedded or derived files. It matches 1 YARA rule. Observed behaviours map to MITRE ATT&CK T1059.003, T1202: INDIRECT COMMAND EXECUTION and T1204.002. The file was analysed statically: it was parsed and decompiled, never executed.

SHA256
35547ae0f5617d1082e8ac7703bf321c6fc34d2f4ce58691e6d15bf7af4e240b
MD5
af26c25baa3be4cc619a32f91d6a27c4
Verdict
Malicious
File type
ZIP Archive · 584 bytes
Category
LOLBin

Cite this report: https://app.malva.re/sha256/35547ae0f5617d1082e8ac7703bf321c6fc34d2f4ce58691e6d15bf7af4e240b

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential

File
Type
ZIP archive
Size
584 B · 584 B
First seen
2026-08-03 11:06 · 2 months ago
Last seen
2026-08-03 11:06 · 2 months ago
Last analysis
2026-08-03 11:06 · 2 months ago
Hashes
MD5 af26c25baa3be4cc619a32f91d6a27c4 Sha1 7522bdbefd35a6c967b344ac6965e206ff3f01f8 Sha256 35547ae0f5617d1082e8ac7703bf321c6fc34d2f4ce58691e6d15bf7af4e240b Sha384 87d297929e0fef976a6bf890a58cd46ce4e253cdee2de0056763c08baba791e377b3ab2af56fcd00386872d63048ce81 Sha512 fedc0972e9b50ff94582e559ce77dde091b268dfc1387f7de135240c3cd5f5cc5671da021111ba127c2b0e25824fbec4f42ae8a65d16c1001b2846163f54c1bf SSDeep 12:5j4ACZX9bneeE9C27kmHwFK0WKS16/Y5HIHaoo:9/CJS9CCXH+CKc6EHIpo TLSH DCF041C39223048FE699ABBA383272328FB540DA84CAA5314DC9EC419C620170A6400A

3 malicious · 3 files
ZIPaf26c25baa3be4cc619a32f91d6a27c4LOLBin
LNKDOC-1H01U5.lnkLOLBin
BIN[Lnk Summary]
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
Path arc:zip>lnk~T1059.003~T1202~T1204.002
Shape arc:zip>lnk
malicious 2 nodes

LNK: Command Execution UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential

3 malicious · 3 files
ZIPaf26c25baa3be4cc619a32f91d6a27c4LOLBin
LNKDOC-1H01U5.lnkLOLBin
BIN[Lnk Summary]
No malware configuration was found at this point.

LNK: Command Execution UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
af26c25baa3be4cc619a32f91d6a27c4 › DOC-1H01U5.lnk
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential
Sign in or create a free account to view the matching YARA rules. Create a free account
An error has occurred. This application may no longer respond until reloaded. Reload 🗙