Malicious
b3038c92b0114535f8347aba6e99f247
ZIP Archive
MD5: b3038c92b0114535f8347aba6e99f247
Size: 584 B
application/zip
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
ZIP archive
Size
584 B · 584 B
First seen
2026-08-03 11:25 · 2 months ago
Last seen
2026-08-03 11:25 · 2 months ago
Last analysis
2026-08-03 11:25 · 2 months ago
Hashes
MD5
b3038c92b0114535f8347aba6e99f247
Sha1
decbdf1de6bbc89fc54fb5b9b943351d7ad0a181
Sha256
561b509a40a0f7bae0025d379ce67f7fbd0e1740f667485229c5d4e78d088977
Sha384
8c0cea6ca49b060cb2326332286b8a522185a8ca2b4016f2292979840f320c31decf9dd70fc7302829e5849fca308e43
Sha512
ce368d782b366c6965dec4a581419021b8e764f32bf8f5620341fd06ec817895827566502a9b636201d43f8a7c6261f2a5e6ad74466586e15e6a2e82d1cb64dd
SSDeep
12:5j0WcK36KYWXSIBpjhpCNXKfLJW8pj1VOiSTBpaoo:90uKKfXSgOX+NrpjnOiCB3o
TLSH
ECF0E191B941D8A5C01785B229DD1724460C048A001BCA67AF20DE90D2496BB8A99294
3 malicious · 3 files
ZIPb3038c92b0114535f8347aba6e99f247T1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKDOC-Q3RI6P.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
arc:zip>lnk~T1059.003~T1202~T1204.002
Shape
arc:zip>lnk
malicious
2 nodes
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential3 malicious · 3 files
ZIPb3038c92b0114535f8347aba6e99f247T1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKDOC-Q3RI6P.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
No malware configuration was found at this point.
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
b3038c92b0114535f8347aba6e99f247 › DOC-Q3RI6P.lnk
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with EssentialSign in or create a free account to view the matching YARA rules.
Create a free account