Malicious
ba01d46fbbf9d4229e851d9c7d14bb7c
ZIP Archive
MD5: ba01d46fbbf9d4229e851d9c7d14bb7c
Size: 881 B
application/zip
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
ZIP archive
Size
881 B · 881 B
First seen
2026-08-03 13:39 · 2 months ago
Last seen
2026-08-03 13:39 · 2 months ago
Last analysis
2026-08-03 13:39 · 2 months ago
Hashes
MD5
ba01d46fbbf9d4229e851d9c7d14bb7c
Sha1
53626c6f56ffea366d7244bf54025085cea251cd
Sha256
9b209abab5794060f6b926d1403614ec3e4fca6c43b2b357acaea550ee71d954
Sha384
c007a1f52ed9de01fd671d75bc8c90e20fea4f400e789080ac4b2c2ad2baea239220172eb304bde063a76357dd77e284
Sha512
97eddceeba69a68c0f651f7952de83e6ef8e28f7115258090aef1dda133623006bca28ffb36d1d909453898ee2b188f0f8ad22eacb0ba255604e6f2b12a795bc
SSDeep
24:9BPifhuFi6xM08f4vu8uBk9KfLLoRZA7gdEdYIij9d:9BKfhuFiZ0vh9KfvGdEdaj9d
TLSH
2611639F532EC680EB1310FBE26D00EE26B404C12009D6BD652CFB422322A4A69288E3
3 malicious · 3 files
ZIPba01d46fbbf9d4229e851d9c7d14bb7cT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKDOC-U15RYP.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
arc:zip>lnk~T1059.003~T1202~T1204.002
Shape
arc:zip>lnk
malicious
2 nodes
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential3 malicious · 3 files
ZIPba01d46fbbf9d4229e851d9c7d14bb7cT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKDOC-U15RYP.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
No malware configuration was found at this point.
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
ba01d46fbbf9d4229e851d9c7d14bb7c › DOC-U15RYP.lnk
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with EssentialSign in or create a free account to view the matching YARA rules.
Create a free account