Malicious
b249ae45b79f2c66f9eef34fb789cab8
ZIP Archive
MD5: b249ae45b79f2c66f9eef34fb789cab8
Size: 587 B
application/zip
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
ZIP archive
Size
587 B · 587 B
First seen
2026-08-03 11:11 · 2 months ago
Last seen
2026-08-03 11:11 · 2 months ago
Last analysis
2026-08-03 11:11 · 2 months ago
Hashes
MD5
b249ae45b79f2c66f9eef34fb789cab8
Sha1
9ebaa1b786b34625638d1f576037e30f7d9d1771
Sha256
af1de0f5c8e105b4642f71fdca082e854a84df238ec68eee36a79498660f6f75
Sha384
4ca385d8e1a1b75fd20f997d302cf3e4f9590acf51a1e1b484c483641dacaeeb6497c79fb0c995bfa797fc9b03ba9fdf
Sha512
429bf0f2dadfc1ad7f2c1bfec5b61f66b6cccf302c0ec5ee9f4ef9ff82b8ef8c5115ec610025a67f8f71f419b280325818678d29ee6a8faff28dd535552eae77
SSDeep
12:5j0Z7P0ruUl4Ef9qADOTj0ADXM1i4WVNo1H2c+fyUjuaol:9McruM4Ef9RD+bzM6roH2hyUql
TLSH
D8F0E1414A4581E9CA03E57CAD65F3A61A29BF4611DE26FA1D14D8160806CCBBF4D4A0
3 malicious · 3 files
ZIPb249ae45b79f2c66f9eef34fb789cab8T1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKDOC-65QDN4.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
arc:zip>lnk~T1059.003~T1202~T1204.002
Shape
arc:zip>lnk
malicious
2 nodes
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential3 malicious · 3 files
ZIPb249ae45b79f2c66f9eef34fb789cab8T1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKDOC-65QDN4.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
No malware configuration was found at this point.
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
b249ae45b79f2c66f9eef34fb789cab8 › DOC-65QDN4.lnk
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with EssentialSign in or create a free account to view the matching YARA rules.
Create a free account