Malicious
Malicious

b6d10d08b2e28857cf1deaf35ff3991b

ZIP Archive
MD5: b6d10d08b2e28857cf1deaf35ff3991b
Size: 597 B
application/zip
Ctrl + scroll to zoom · drag to pan

This sample is a 597 bytes ZIP Archive classified as malicious by Malva.RE (lolbin). Static analysis extracted 2 embedded or derived files. It matches 1 YARA rule. Observed behaviours map to MITRE ATT&CK T1059.003, T1202: INDIRECT COMMAND EXECUTION and T1204.002. The file was analysed statically: it was parsed and decompiled, never executed.

SHA256
c707d6dc5feb270b18d817092def73965a1f697326d0523d8eab61a0af7ee748
MD5
b6d10d08b2e28857cf1deaf35ff3991b
Verdict
Malicious
File type
ZIP Archive · 597 bytes
Category
LOLBin

Cite this report: https://app.malva.re/sha256/c707d6dc5feb270b18d817092def73965a1f697326d0523d8eab61a0af7ee748

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential

File
Type
ZIP archive
Size
597 B · 597 B
First seen
2026-08-03 13:33 · 2 months ago
Last seen
2026-08-03 13:33 · 2 months ago
Last analysis
2026-08-03 13:33 · 2 months ago
Hashes
MD5 b6d10d08b2e28857cf1deaf35ff3991b Sha1 ec078792ae2987069cc085b145bbd6935ed9c2f5 Sha256 c707d6dc5feb270b18d817092def73965a1f697326d0523d8eab61a0af7ee748 Sha384 8bcac081b7dca65f7a88bfdaa89c2534a7c2582e8adff11383a534722e771eeeff09e0bf0075df4ea894ebf406b47ffa Sha512 0f8a79323567b72c4e2a2ed565e196403973b77bc23bf3252eedbe57e90d0cb5c94d52ef4aaaff8c3eb2f742c95250ccb70149241ce2a841ff705023bcdf73c2 SSDeep 12:5jipqdskGlknWgipl7Nk0A8hLeyIQ2tAmuMcsn65IfYM6YiaoQ/:9ipqdWYWgIl7NrA8qpFxcs6uYM6YCQ TLSH AAF0E79B41F55256C746A0FF88BF65F1925CB45A8053FF075360CC9E45C74E67429150

3 malicious · 3 files
ZIPb6d10d08b2e28857cf1deaf35ff3991bLOLBin
LNKDOC-A2PRN1.lnkLOLBin
BIN[Lnk Summary]
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
Path arc:zip>lnk~T1059.003~T1202~T1204.002
Shape arc:zip>lnk
malicious 2 nodes

LNK: Command Execution UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential

3 malicious · 3 files
ZIPb6d10d08b2e28857cf1deaf35ff3991bLOLBin
LNKDOC-A2PRN1.lnkLOLBin
BIN[Lnk Summary]
No malware configuration was found at this point.

LNK: Command Execution UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
b6d10d08b2e28857cf1deaf35ff3991b › DOC-A2PRN1.lnk
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential
Sign in or create a free account to view the matching YARA rules. Create a free account
An error has occurred. This application may no longer respond until reloaded. Reload 🗙