Malicious
bb4ddaf2da058c5cb3cc0d9e0d98b1e1
ZIP Archive
MD5: bb4ddaf2da058c5cb3cc0d9e0d98b1e1
Size: 593 B
application/zip
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
ZIP archive
Size
593 B · 593 B
First seen
2026-08-04 08:08 · 2 months ago
Last seen
2026-08-04 08:08 · 2 months ago
Last analysis
2026-08-04 08:08 · 2 months ago
Hashes
MD5
bb4ddaf2da058c5cb3cc0d9e0d98b1e1
Sha1
80b6bd5fcfc4d19b14faf311fac2fbf97bdf1265
Sha256
a87c7ae620bb3d822aac8edd970555cb6f97b84e15d804dc9515b142dbf96903
Sha384
ebc34f1bf56ba15d5ffd02c28a04d969924cc4152084f88e04da0f8b94442e069cecd2a9200dcf407f7926c41f909f50
Sha512
133dcce5c40ed5d1f76c10f0829a6a1108894cb42f80891720dd40cc9b8a4a409c5c32eaee83b6613a6b95a809b5716641ae7d9af1ea1cf132b59b0d5ddaa35e
SSDeep
12:5jJZMIuY+YlABfuoy3E1wrtT/oX5RjTq40fNckX4Epzchecaof:9vMIuY+0ABHQEXfq4kKBf
TLSH
51F0412B0187804CCB4B8D7441A7213F074E30E76E5EE79223B88083A888A5CB6B9E19
3 malicious · 3 files
ZIPbb4ddaf2da058c5cb3cc0d9e0d98b1e1T1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKDOC-0ZYCTE.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
arc:zip>lnk~T1059.003~T1202~T1204.002
Shape
arc:zip>lnk
malicious
2 nodes
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential3 malicious · 3 files
ZIPbb4ddaf2da058c5cb3cc0d9e0d98b1e1T1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKDOC-0ZYCTE.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
No malware configuration was found at this point.
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
bb4ddaf2da058c5cb3cc0d9e0d98b1e1 › DOC-0ZYCTE.lnk
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with EssentialSign in or create a free account to view the matching YARA rules.
Create a free account