Malicious
ba28436c88e0b1a3a008870d9c28670a
ZIP Archive
MD5: ba28436c88e0b1a3a008870d9c28670a
Size: 854 B
application/zip
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
ZIP archive
Size
854 B · 854 B
First seen
2026-08-04 08:18 · 2 months ago
Last seen
2026-08-04 08:18 · 2 months ago
Last analysis
2026-08-04 08:18 · 2 months ago
Hashes
MD5
ba28436c88e0b1a3a008870d9c28670a
Sha1
c27babbb8cd045fbf79a99a711ec2f8f36b363d9
Sha256
9eec69e779f82f15158cb109af1c1024f2fe5ca6f3e0c5084d1c3fe2bb8f7e75
Sha384
825c7eee0a836f4e0d2da8ad3c61079dd90d16429f91bd64ad43ca205457c2a2452c223c85a4c11d5c7128f9a4f7b298
Sha512
d37048ecd18851176cdb0a8656ee94c6ff0f9a893814de90ec96bb2e40f82f280897ce6870894a3f664b2db6a37e382c53d63c16cf1a6e592aa805d28877de35
SSDeep
24:9On/s4pWDjnSxGj8tBLSnOrzheMG1089EB/OFa4a4n/sTaQl:9OnLsnVj8suheMl89EcFaH4ntQl
TLSH
EE01D6BA5CA62998E70BBD7C857F78C1C6AB7020221C371F6A70C4020D860622BCA077
3 malicious · 3 files
ZIPba28436c88e0b1a3a008870d9c28670aT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKDOC-U8YFN6.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
arc:zip>lnk~T1059.003~T1202~T1204.002
Shape
arc:zip>lnk
malicious
2 nodes
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential3 malicious · 3 files
ZIPba28436c88e0b1a3a008870d9c28670aT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKDOC-U8YFN6.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
No malware configuration was found at this point.
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
ba28436c88e0b1a3a008870d9c28670a › DOC-U8YFN6.lnk
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with EssentialSign in or create a free account to view the matching YARA rules.
Create a free account