Malicious
Malicious

bdacec152763f1de90927ad5527a560a

ZIP Archive
MD5: bdacec152763f1de90927ad5527a560a
Size: 866 B
application/zip

This sample is a 866 bytes ZIP Archive for which Malva.RE's static analysis did not establish a malicious verdict. Static analysis extracted 2 embedded or derived files. It matches 1 YARA rule. Observed behaviours map to MITRE ATT&CK T1059.003, T1202: INDIRECT COMMAND EXECUTION and T1204.002. The file was analysed statically: it was parsed and decompiled, never executed.

SHA256
a9b1ce99cdf021cb82ae4b0ee80b3ec4197c98799e0419d08df7bb10ca3ac0cb
MD5
bdacec152763f1de90927ad5527a560a
Verdict
Malicious
File type
ZIP Archive · 866 bytes
Category
LOLBin

Cite this report: https://app.malva.re/sha256/a9b1ce99cdf021cb82ae4b0ee80b3ec4197c98799e0419d08df7bb10ca3ac0cb

Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential

File
Type
ZIP archive
Size
866 B · 866 B
First seen
2026-08-04 08:02 · 2 months ago
Last seen
2026-08-04 08:02 · 2 months ago
Last analysis
2026-08-04 08:02 · 2 months ago
Hashes
MD5 bdacec152763f1de90927ad5527a560a Sha1 2583a5a750bee7cb8d2e61ae7064312da421cb2b Sha256 a9b1ce99cdf021cb82ae4b0ee80b3ec4197c98799e0419d08df7bb10ca3ac0cb Sha384 84f5d86e366cb6928a3dc50e65a0999b3fe48deb8f3f37fcb0cce5e14f3e8410d4fc453b080e30fd7f2f112b513544b8 Sha512 f078f79dd5a5e2cd32164cc93f43b3dabea086f9cc4a96da0e15b27e53bb767adbdafd19f33544ad4642e97143d74bb3eaa804fd62260b4cff5aae33b7fd833f SSDeep 24:9joSRF4vzpNTdPxGBQ85+rEg36Vpmfvd0/FOC0d/BFkkl:9jbOj5p8+rEg36jm3y/FH+/BFkkl TLSH B71156B692622507C942D535D19A1A35418A141180B5D27722B599D59C1B94E0FFBC8F

3 malicious · 3 files
ZIPbdacec152763f1de90927ad5527a560aLOLBin
LNKDOC-DG9BUM.lnkLOLBin
BIN[Lnk Summary]
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
Path arc:zip>lnk~T1059.003~T1202~T1204.002
Shape arc:zip>lnk
malicious 2 nodes

LNK: Command Execution UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential

3 malicious · 3 files
ZIPbdacec152763f1de90927ad5527a560aLOLBin
LNKDOC-DG9BUM.lnkLOLBin
BIN[Lnk Summary]
No malware configuration was found at this point.

LNK: Command Execution UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
bdacec152763f1de90927ad5527a560a › DOC-DG9BUM.lnk
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential
Sign in or create a free account to view the matching YARA rules. Create a free account
An error has occurred. This application may no longer respond until reloaded. Reload 🗙