Malicious
ZIP Archive
MD5: bd4039aa0c0c16b8c5cd546bb6f67dff
Size: 917 B
application/zip
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
ZIP archive
Size
917 B · 917 B
First seen
2026-08-03 13:36 · 2 months ago
Last seen
2026-08-03 13:36 · 2 months ago
Last analysis
2026-08-03 13:36 · 2 months ago
Hashes
MD5
bd4039aa0c0c16b8c5cd546bb6f67dff
Sha1
539f2f03ad13f20fe071fd442fdfffe74f2d1443
Sha256
c47d2ebcbb5f119c950a82c63f6ba696861667cff16ad4e6551a44d15d00364d
Sha384
e09ac1f5b2b3aa84fca981993eea583345e1e4d3e84b7947a84b4a7abeef9ed7ce0a7a029ee414f2ddc6f3667e731a63
Sha512
d900e474d5ea394ec05a28eec6e5eaf8d07a79b394f1fe714f350630bc21242cf3e49cf5aeb367d6007bc32bdc313071bc4da0d7ef44b4cb85fa5f5849c316d7
SSDeep
24:9wE/lmEQygN9TtMoF92SoPXMuwwKhmwSTnHdmYqYqE/8eh:9w8lmEuN9x92nXMYwEH5qYq88eh
TLSH
4A11B732D18CA45DC785C4F6993E15B2AC6B1348D6848C06D0A198869EB5FE513828FC
3 malicious · 3 files
ZIPbd4039aa0c0c16b8c5cd546bb6f67dffT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKDOC-VGAA62.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
arc:zip>lnk~T1059.003~T1202~T1204.002
Shape
arc:zip>lnk
malicious
2 nodes
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential