Malicious
bcba14cf019ace92f993ad8f65f40cef
ZIP Archive
MD5: bcba14cf019ace92f993ad8f65f40cef
Size: 930 B
application/zip
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
ZIP archive
Size
930 B · 930 B
First seen
2026-08-04 08:06 · 2 months ago
Last seen
2026-08-04 08:06 · 2 months ago
Last analysis
2026-08-04 08:06 · 2 months ago
Hashes
MD5
bcba14cf019ace92f993ad8f65f40cef
Sha1
1580eb29eb486c8db3fb1d465e443609de868c0d
Sha256
a6105fa9b78193cfb0d63b22d0c7b3876f0dd8c3077df350b505ce151e10a1c3
Sha384
6cb26fc117dcb713a2333cf00cf233bba40cde4190dee4d31891d32d08303bf4296fca4f4f5c9b4ba1f0c94ea92595d6
Sha512
20da998257ee40caf5591224683d7d03f1ac1cdd452610edf9ba1e1c4056881a5cb28721005486ac39207721b98e311840b3b0f0b12aeaa5e6b43d332c714027
SSDeep
24:9K+JrBAgk2Agbd7qD/w7PPg1hRTBSCMJ37s6jwY0i8R9IVHRnnQ/J+unGPQs:9R1O92V7qM7PY5Zy3hjZveYxQ/ZnGPQs
TLSH
BF11EB77F43F6165C4C15C70B2CC7C9F381A78E4231E1703956D7CD9D2169673AA4204
3 malicious · 3 files
ZIPbcba14cf019ace92f993ad8f65f40cefT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKDOC-1RTIYK.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
arc:zip>lnk~T1059.003~T1202~T1204.002
Shape
arc:zip>lnk
malicious
2 nodes
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential3 malicious · 3 files
ZIPbcba14cf019ace92f993ad8f65f40cefT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKDOC-1RTIYK.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
No malware configuration was found at this point.
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
bcba14cf019ace92f993ad8f65f40cef › DOC-1RTIYK.lnk
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with EssentialSign in or create a free account to view the matching YARA rules.
Create a free account