Malicious
b1845ca84cdc799cedd4ac84f6bb797c
ZIP Archive
MD5: b1845ca84cdc799cedd4ac84f6bb797c
Size: 914 B
application/zip
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
ZIP archive
Size
914 B · 914 B
First seen
2026-08-04 08:18 · 2 months ago
Last seen
2026-08-04 08:18 · 2 months ago
Last analysis
2026-08-04 08:18 · 2 months ago
Hashes
MD5
b1845ca84cdc799cedd4ac84f6bb797c
Sha1
4d0f766d1c7953a27bb40dffc707f87cdac25974
Sha256
77345eec89fcb2e92e0a3436d64d7d548dbfe514d51c020a31c7e726d8f16a21
Sha384
78b9029265fb968339cb48021b84bf6c6b38a8d781ef3b34217bef5b046e3dbc8be2ae2f3145d64ede45994b2f8c0d1e
Sha512
c344724a1991ecbc56ec0b9ded487cfd2f9a310a0ff88dec60cb557de08851cda8a61bedd0486f939494028b1adf2197ce8fcdde6b6ef51dcc6e249c3062e18b
SSDeep
24:9xcSxusGZh27XD8bwuHX28I1A+abAKACPd3WMxlUl:91jGZh27XD8Eum8wA+OAKACP0MxlUl
TLSH
0211E62A2FA9EC86D3C1A5F1823243F3B338CBB420472D676B109C048E71361C9CA440
3 malicious · 3 files
ZIPb1845ca84cdc799cedd4ac84f6bb797cT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKDOC-YRDNTV.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
arc:zip>lnk~T1059.003~T1202~T1204.002
Shape
arc:zip>lnk
malicious
2 nodes
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential3 malicious · 3 files
ZIPb1845ca84cdc799cedd4ac84f6bb797cT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKDOC-YRDNTV.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
No malware configuration was found at this point.
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
b1845ca84cdc799cedd4ac84f6bb797c › DOC-YRDNTV.lnk
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with EssentialSign in or create a free account to view the matching YARA rules.
Create a free account