Malicious
b9642de9094e9e818702dcabd54dd889
ZIP Archive
MD5: b9642de9094e9e818702dcabd54dd889
Size: 588 B
application/zip
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
ZIP archive
Size
588 B · 588 B
First seen
2026-08-03 13:39 · 2 months ago
Last seen
2026-08-03 13:39 · 2 months ago
Last analysis
2026-08-03 13:39 · 2 months ago
Hashes
MD5
b9642de9094e9e818702dcabd54dd889
Sha1
c4eaaeb9732322d196e70cf6226b4d2f7e420d18
Sha256
384ff1c84074b93960812a4510ea41750d59f2ef99b728ddd3b7637c34d889dd
Sha384
3662c7e10c3c2e2c041b58f36e62e89e8483e5075a0063e5ba46f91474b2011487230f4af1789b88190feae6008e4f92
Sha512
11681527ebffac457d1b636fafa1dca7284863d29dd52df8d3997dd65f5d01bbbad4e55655de7d7dc818b4e1853da97f7259c0948809b29c7e17ecb0fa07ef91
SSDeep
12:5jx4/Bzth1emIGsUwi4ZhlnV1Sc0HdDOJ3/bb8bNGvwlF7OxiaoM:9wdtLehGs9i0cHAJ3rOxM
TLSH
17F047B44D1D151DD40190F8DC2329D400A9DC1041C5B156CA41E10A7ECF0F75566A90
3 malicious · 3 files
ZIPb9642de9094e9e818702dcabd54dd889T1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKDOC-XTBK53.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
arc:zip>lnk~T1059.003~T1202~T1204.002
Shape
arc:zip>lnk
malicious
2 nodes
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential3 malicious · 3 files
ZIPb9642de9094e9e818702dcabd54dd889T1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKDOC-XTBK53.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
No malware configuration was found at this point.
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
b9642de9094e9e818702dcabd54dd889 › DOC-XTBK53.lnk
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with EssentialSign in or create a free account to view the matching YARA rules.
Create a free account