Malicious
Malicious

b79e2b8b4e13cec19b30b96de28a2ac4

ZIP Archive
MD5: b79e2b8b4e13cec19b30b96de28a2ac4
Size: 593 B
application/zip
Ctrl + scroll to zoom · drag to pan

This sample is a 593 bytes ZIP Archive for which Malva.RE's static analysis did not establish a malicious verdict. Static analysis extracted 2 embedded or derived files. It matches 1 YARA rule. Observed behaviours map to MITRE ATT&CK T1059.003, T1202: INDIRECT COMMAND EXECUTION and T1204.002. The file was analysed statically: it was parsed and decompiled, never executed.

SHA256
33a88551047115b93a05010e436debddd6e0314a7731047c3371236d642cba51
MD5
b79e2b8b4e13cec19b30b96de28a2ac4
Verdict
Malicious
File type
ZIP Archive · 593 bytes
Category
LOLBin

Cite this report: https://app.malva.re/sha256/33a88551047115b93a05010e436debddd6e0314a7731047c3371236d642cba51

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential

File
Type
ZIP archive
Size
593 B · 593 B
First seen
2026-08-03 11:01 · 2 months ago
Last seen
2026-08-03 11:01 · 2 months ago
Last analysis
2026-08-03 11:01 · 2 months ago
Hashes
MD5 b79e2b8b4e13cec19b30b96de28a2ac4 Sha1 12460badeb18ac01af01dcb0eac34172fb4d033b Sha256 33a88551047115b93a05010e436debddd6e0314a7731047c3371236d642cba51 Sha384 44f709ca691d85d0934a0a66a1e46aea40480e3504c39dd827e783c49a55bcd74c2a1039b0a29ffbeca8f89839f65c4a Sha512 317b7f2d6a7bd01ed0dd3d84cd26f094eab6ab5a5e50f8cb16619ef5b01ddf1d26772cbac4aefd96e15161b8beb11dde85cbbcd2b3ad37acfca61334b7b3f2af SSDeep 12:5jn3XtRFzk8Ml9N2Pw7ls39KzMm/K0naR92HsOGi1OP8G7QFJ3Xeiaof:9n3pkd9N2I7lo90Mm/K0aUbbOpQFJ3u6 TLSH 8CF0E1CDD2461051C63355724E76B7DE2570F1B3C269871B9F9D918A5814988619A470

3 malicious · 3 files
ZIPb79e2b8b4e13cec19b30b96de28a2ac4LOLBin
LNKDOC-I91FQU.lnkLOLBin
BIN[Lnk Summary]
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
Path arc:zip>lnk~T1059.003~T1202~T1204.002
Shape arc:zip>lnk
malicious 2 nodes

LNK: Command Execution UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential

3 malicious · 3 files
ZIPb79e2b8b4e13cec19b30b96de28a2ac4LOLBin
LNKDOC-I91FQU.lnkLOLBin
BIN[Lnk Summary]
No malware configuration was found at this point.

LNK: Command Execution UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
b79e2b8b4e13cec19b30b96de28a2ac4 › DOC-I91FQU.lnk
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential
Sign in or create a free account to view the matching YARA rules. Create a free account
An error has occurred. This application may no longer respond until reloaded. Reload 🗙