Malicious
b644840652ab946a7f66e1e2fb4359e2
ZIP Archive
MD5: b644840652ab946a7f66e1e2fb4359e2
Size: 584 B
application/zip
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
ZIP archive
Size
584 B · 584 B
First seen
2026-08-03 12:59 · 2 months ago
Last seen
2026-08-03 12:59 · 2 months ago
Last analysis
2026-08-03 12:59 · 2 months ago
Hashes
MD5
b644840652ab946a7f66e1e2fb4359e2
Sha1
bd3e80e85e5299fa3068d5a70c8c3c36bbf9b8c6
Sha256
b26ec374c4e9c1e4925f4c7d23412070d7022ec05c8d4058cd214b5c08a64b8c
Sha384
c7c4032c921338ab7a04ff629f9ea1ad6de1bf7b103dde2b897e087b39c8aa02c36571408d5f12be205e8df7efa32ce5
Sha512
7d16a9f4eafd7a6bff07c8cca3105674a8442502549233411091fc9d55d087ec7f66dcfde4bb6bb988ddfb3c3e83c7d59ad3d5fa8acf4fcd528da97b4166f2f4
SSDeep
12:5j080qe9pEg0L6gNQouM8uIuAv7cMca0x0bIYxRFoHY67anBaoo:90n9pa6g2ouP57cMyx0bIYQavo
TLSH
27F0EBCE2D75DAB5C6508C3582B214EF9F28C4B828090779BBB0B32829610435FCA8E2
3 malicious · 3 files
ZIPb644840652ab946a7f66e1e2fb4359e2T1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKDOC-B7LV0Q.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
arc:zip>lnk~T1059.003~T1202~T1204.002
Shape
arc:zip>lnk
malicious
2 nodes
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential3 malicious · 3 files
ZIPb644840652ab946a7f66e1e2fb4359e2T1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKDOC-B7LV0Q.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
No malware configuration was found at this point.
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
b644840652ab946a7f66e1e2fb4359e2 › DOC-B7LV0Q.lnk
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with EssentialSign in or create a free account to view the matching YARA rules.
Create a free account