Malicious
b8661779c95d8224b233c6809501370c
ZIP Archive
MD5: b8661779c95d8224b233c6809501370c
Size: 13.33 KB
application/zip
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
ZIP archive
Size
13.33 KB · 13,334 B
First seen
2026-07-16 14:15 · 3 months ago
Last seen
2026-07-16 14:15 · 3 months ago
Last analysis
2026-07-17 17:49 · 3 months ago
Hashes
MD5
b8661779c95d8224b233c6809501370c
Sha1
f6b106a1fbe9b859e0ac4428895ebd86f6e3f7d4
Sha256
4918677f8c77dbbe93d77225a871467ef6f5b0fff11e558460725370e228252b
Sha384
16a294be568e1ddfa4238deb60d30b51a2fe1573f19bbefa7bb4df088e57e30d507b64a047a01ec8a3b44a0a417749a6
Sha512
d564514346dca58784c6adf0dd22184ece4de7f9a18c97a0aee8068afc2f6a49ad0f5f3066b3148441b05310ac6d81f7ae437d75f7b878d04c9207825eded716
SSDeep
48:l7Pa9mpr4Xan3y7KEu+njt9Kb4Zw7Pa9mpr5anxby7KEu+njtdQca38/E7o/uZli:l7EDyp+njnKcy7E4yxt+njXQX377B27f
TLSH
2A52CC2835EC1119E1F3EE716DA8A7C59E7BBAB3AD76154D484912090902F40EE62B3B
5 malicious · 5 files
ZIPb8661779c95d8224b233c6809501370cT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKNAKAZ_MO_perevirka_mayna.docx.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
LNKSPYSOK_mayna.docx.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
arc:zip>lnk~T1059.003~T1202~T1204.002
Shape
arc:zip>lnk
malicious
2 nodes
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential5 malicious · 5 files
ZIPb8661779c95d8224b233c6809501370cT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKNAKAZ_MO_perevirka_mayna.docx.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
LNKSPYSOK_mayna.docx.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
No malware configuration was found at this point.
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
b8661779c95d8224b233c6809501370c › SPYSOK_mayna.docx.lnk
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
b8661779c95d8224b233c6809501370c › NAKAZ_MO_perevirka_mayna.docx.lnk
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with EssentialSign in or create a free account to view the matching YARA rules.
Create a free account