Malicious
b61ccf3125da11b8c4e5132a92ce4cac
ZIP Archive
MD5: b61ccf3125da11b8c4e5132a92ce4cac
Size: 591 B
application/zip
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
ZIP archive
Size
591 B · 591 B
First seen
2026-08-04 07:46 · 2 months ago
Last seen
2026-08-04 07:46 · 2 months ago
Last analysis
2026-08-04 07:46 · 2 months ago
Hashes
MD5
b61ccf3125da11b8c4e5132a92ce4cac
Sha1
1f4b7f460d4284f6e1359043dbf2feecc03880e8
Sha256
43127f2edc96c8766c9ea6596cf073c1ace9c884fefc71dad9340f31fceb8581
Sha384
62039ecd08a993b3897b9a3919c2be695abd52264e3a400c8eaad8e61e621ddd10b2b032db7da9bc0969358f68404528
Sha512
cbef1cd55a2f3ac16ed18294cb3513d731f74bba3c1ce777e588710312eb181e371e1aed33c5176896d02ff10c642596586553af9ba57afed7ce2b7d5926a2d9
SSDeep
12:5jqWDSttFsk6C0QeNzaNccWx4B1RxAa6rCf12OTRXZ8Wi3iaox/:94ttFskF0r6e8sqdpTRXZmCx/
TLSH
0EF0E1E3042A1FE9D1C6E1F690EE6B966785DF03391F2101119869419C819522C1E47D
3 malicious · 3 files
ZIPb61ccf3125da11b8c4e5132a92ce4cacT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKDOC-YW0WV1.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
arc:zip>lnk~T1059.003~T1202~T1204.002
Shape
arc:zip>lnk
malicious
2 nodes
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential3 malicious · 3 files
ZIPb61ccf3125da11b8c4e5132a92ce4cacT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKDOC-YW0WV1.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
No malware configuration was found at this point.
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
b61ccf3125da11b8c4e5132a92ce4cac › DOC-YW0WV1.lnk
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with EssentialSign in or create a free account to view the matching YARA rules.
Create a free account