Malicious
b45e03e64e472613e42b6d64a34ce4d1
ZIP Archive
MD5: b45e03e64e472613e42b6d64a34ce4d1
Size: 587 B
application/zip
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
ZIP archive
Size
587 B · 587 B
First seen
2026-08-03 12:03 · 2 months ago
Last seen
2026-08-03 12:03 · 2 months ago
Last analysis
2026-08-03 12:03 · 2 months ago
Hashes
MD5
b45e03e64e472613e42b6d64a34ce4d1
Sha1
03eb51bcfbd75d6aa9e9afb47099021983a2845b
Sha256
534d7b87581f576a755a26f594a0e4cfe0b6d0899276c5abdf39993bad039b48
Sha384
ed2049ae3d0361bb06d4933082a6103d2b66f553c4d68f23f8785a3f1b1950497faeb679d0e995f6a5a1f8486dd2526d
Sha512
939e32c21aedcd7b7c0f98c2a2f3dabd2ffc2d704a5603678ca013148b0c09224ba96727d91c7a5678e149a96d88844839718910a008739741093f095815da73
SSDeep
12:5jANOlxov7gI9FAOpnFFXGd46ryJDbxgH8/mtQULszl7i9R/Nt2DerupuNHl6aG:9EI6cA1J/XGdTryJHxgcuzLelOZTrup1
TLSH
58F041927C01A96AE552C2F05DCA67981332103A65C135A27928F4543B024F11B500A8
3 malicious · 3 files
ZIPb45e03e64e472613e42b6d64a34ce4d1T1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKPDFDOC-D56QFG.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
arc:zip>lnk~T1059.003~T1202~T1204.002
Shape
arc:zip>lnk
malicious
2 nodes
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential3 malicious · 3 files
ZIPb45e03e64e472613e42b6d64a34ce4d1T1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKPDFDOC-D56QFG.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
No malware configuration was found at this point.
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
b45e03e64e472613e42b6d64a34ce4d1 › PDFDOC-D56QFG.lnk
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with EssentialSign in or create a free account to view the matching YARA rules.
Create a free account