Malicious
bafff09f31ec7eb3ebb0fb717b836013
ZIP Archive
MD5: bafff09f31ec7eb3ebb0fb717b836013
Size: 590 B
application/zip
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
ZIP archive
Size
590 B · 590 B
First seen
2026-08-03 11:06 · 2 months ago
Last seen
2026-08-03 11:06 · 2 months ago
Last analysis
2026-08-03 11:06 · 2 months ago
Hashes
MD5
bafff09f31ec7eb3ebb0fb717b836013
Sha1
15aaf0584aec60414bf069b3b9102c2b7aa6f293
Sha256
6e9ae5adff556291cdc400fe2d7427dc687ea57704017d6039bd9cc3f730e56b
Sha384
12135681efb79ae1994741f8568665fd02845c03cf66d27ccec9ca39eb41bdf93c2a7019687cf15c9a8e6266d8c1a712
Sha512
deefb1e62fc86231f997097c57788ffa4b0c6311d45d4a6d44d84543f8b3c25038213d8dbab5acf55bb493d148c498123163cbc7273ee3bf6b9e7fd2ac96b46c
SSDeep
12:5jJleRl6nlZVto0SxCwrn4JRRFLXxG8T9d3tHzSbz2DleSYao6:9JARlIlZVFC/4JdXxGA9fHzSbCDASU6
TLSH
60F0EB3318B938A1CD318EF282706B68A26A9886040D559A05B6FE5E1E803E07F4AD99
3 malicious · 3 files
ZIPbafff09f31ec7eb3ebb0fb717b836013T1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKDOC-GJWOI7.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
arc:zip>lnk~T1059.003~T1202~T1204.002
Shape
arc:zip>lnk
malicious
2 nodes
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential3 malicious · 3 files
ZIPbafff09f31ec7eb3ebb0fb717b836013T1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKDOC-GJWOI7.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
No malware configuration was found at this point.
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
bafff09f31ec7eb3ebb0fb717b836013 › DOC-GJWOI7.lnk
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with EssentialSign in or create a free account to view the matching YARA rules.
Create a free account