Malicious
bc93e3c71b8da9df66f4a099a5e2b08b
ZIP Archive
MD5: bc93e3c71b8da9df66f4a099a5e2b08b
Size: 599 B
application/zip
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
ZIP archive
Size
599 B · 599 B
First seen
2026-08-03 12:12 · 2 months ago
Last seen
2026-08-03 12:12 · 2 months ago
Last analysis
2026-08-03 12:12 · 2 months ago
Hashes
MD5
bc93e3c71b8da9df66f4a099a5e2b08b
Sha1
5dff94ba99b156cd61a62b2fd3b9553ba7a9cae5
Sha256
009a7a169cf10d53259ca3d8a2c8edf374443cb86c5abae1ed7e361a76b29394
Sha384
683caa0d19d7eebb6a1b8da781b6707955de6ce3a311f2c91dd7d7a6d6a656b404a4c5ea0879d22fc12fb81d75fc8208
Sha512
999b4363be8192b03d619bfd56c1aeff4f3005b313e4f8ad8d6008c6c8fdfbd17b1c8076bea655c8878d8e785e332890b57b53cc9224d864ec3bb3411996de65
SSDeep
12:5jIUfl+MyhEP4gzoMkYn6oQHEzHRoe3NRWZSRkVxe1MQ/d3LIdvhSOqH9haRlsa3:9ffl+HDMkYsKHRo8TWIR8+9hL9OqHUsQ
TLSH
E4F0A21748A1960DCD0B4DBA263BAF3F6ED89676462A844EE2C718E774940EF46351C4
3 malicious · 3 files
ZIPbc93e3c71b8da9df66f4a099a5e2b08bT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKLeXNET-DOC-XG3BMK.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
arc:zip>lnk~T1059.003~T1202~T1204.002
Shape
arc:zip>lnk
malicious
2 nodes
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential3 malicious · 3 files
ZIPbc93e3c71b8da9df66f4a099a5e2b08bT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKLeXNET-DOC-XG3BMK.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
No malware configuration was found at this point.
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
bc93e3c71b8da9df66f4a099a5e2b08b › LeXNET-DOC-XG3BMK.lnk
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with EssentialSign in or create a free account to view the matching YARA rules.
Create a free account