Malicious
b1657d07ee5730ad2d158cefbb1ef127
ZIP Archive
MD5: b1657d07ee5730ad2d158cefbb1ef127
Size: 582 B
application/zip
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
ZIP archive
Size
582 B · 582 B
First seen
2026-08-04 08:24 · 2 months ago
Last seen
2026-08-04 08:24 · 2 months ago
Last analysis
2026-08-04 08:24 · 2 months ago
Hashes
MD5
b1657d07ee5730ad2d158cefbb1ef127
Sha1
ce64f3b78f106bfa8f097e87b84830a63637ac26
Sha256
8e5292eb86f0e0fd2fcf4bbcec884a5ee43e00a05ea31bbd31b1c2e386bb5273
Sha384
267a94bedc4e149ff3bb34007013d6e8681a2790aedce8e5543c513709530fdc447a1ba70febc454255adaf54996d570
Sha512
2c7593f1bb081bb005c39d0541755bd787d42c7b6536c004aebc98455ecec7c9ec139a873267951f56582bdb1b6087753cdef789549369a1762a9c62cd24caeb
SSDeep
12:5joM97Z2SNUm92WhKW4YdsbCDiSVzFlzGbcCFcaZAQFR18Q3NoPB0URxG75uMsa1:9oM97Z26Um92Wd4M7iSVzFpG4CFcaVR7
TLSH
C5F04136EA27F540C803903381B224178B22004B84170DFE027BFD8BC12D20D8EE84AD
3 malicious · 3 files
ZIPb1657d07ee5730ad2d158cefbb1ef127T1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKDOC-477SCL.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
arc:zip>lnk~T1059.003~T1202~T1204.002
Shape
arc:zip>lnk
malicious
2 nodes
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential3 malicious · 3 files
ZIPb1657d07ee5730ad2d158cefbb1ef127T1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKDOC-477SCL.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
No malware configuration was found at this point.
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
b1657d07ee5730ad2d158cefbb1ef127 › DOC-477SCL.lnk
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with EssentialSign in or create a free account to view the matching YARA rules.
Create a free account