Malicious
b941d28bd96fbbaa99beb1ebe87bc00d
ZIP Archive
MD5: b941d28bd96fbbaa99beb1ebe87bc00d
Size: 855 B
application/zip
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
ZIP archive
Size
855 B · 855 B
First seen
2026-08-04 07:46 · 2 months ago
Last seen
2026-08-04 07:46 · 2 months ago
Last analysis
2026-08-04 07:46 · 2 months ago
Hashes
MD5
b941d28bd96fbbaa99beb1ebe87bc00d
Sha1
dd242bf6df3adc67ab16db27f7795c7040bea242
Sha256
ecafde155f54fa33beb45110ceb9305f5e95ba6c17179e9b7184e8f5b1a43f05
Sha384
be9c912f95766d310e1ccb1986945fe2c4e7e2eebb1a88dcb3906a1c7989b8e60b2ebce4349627e4e0d835f74f1ee1c7
Sha512
976fd09f98aa51a85a13b36e2d750f425bf38e297d4783675633869602120923f47a57404e99c000893f95edf825f24492d1995e50566daf5e3630f0be5e9cf2
SSDeep
24:9nkm0+C7yhD3DcpTTl0uD2MvGnh21BRBT:9km/NDcx4MeAj7T
TLSH
0211962335F78D11C8065078F4F03E0E05661B0CE0755E6EF3B1CEC94A734847906E12
3 malicious · 3 files
ZIPb941d28bd96fbbaa99beb1ebe87bc00dT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKDOC-S8VOYO.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
arc:zip>lnk~T1059.003~T1202~T1204.002
Shape
arc:zip>lnk
malicious
2 nodes
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential3 malicious · 3 files
ZIPb941d28bd96fbbaa99beb1ebe87bc00dT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKDOC-S8VOYO.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
No malware configuration was found at this point.
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
b941d28bd96fbbaa99beb1ebe87bc00d › DOC-S8VOYO.lnk
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with EssentialSign in or create a free account to view the matching YARA rules.
Create a free account