Malicious
Malicious

be822e87b2126cc276809993317fcb42

ZIP Archive
MD5: be822e87b2126cc276809993317fcb42
Size: 590 B
application/zip
Ctrl + scroll to zoom · drag to pan

This sample is a 590 bytes ZIP Archive classified as malicious by Malva.RE (lolbin). Static analysis extracted 2 embedded or derived files. It matches 1 YARA rule. Observed behaviours map to MITRE ATT&CK T1059.003, T1202: INDIRECT COMMAND EXECUTION and T1204.002. The file was analysed statically: it was parsed and decompiled, never executed.

SHA256
af63ef312848067342d80995fb0569363228cdc08bfbf84b43cb888dc9d79df9
MD5
be822e87b2126cc276809993317fcb42
Verdict
Malicious
File type
ZIP Archive · 590 bytes
Category
LOLBin

Cite this report: https://app.malva.re/sha256/af63ef312848067342d80995fb0569363228cdc08bfbf84b43cb888dc9d79df9

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential

File
Type
ZIP archive
Size
590 B · 590 B
First seen
2026-08-03 10:36 · 2 months ago
Last seen
2026-08-03 10:36 · 2 months ago
Last analysis
2026-08-03 10:36 · 2 months ago
Hashes
MD5 be822e87b2126cc276809993317fcb42 Sha1 76e7506ceb32933ea86f9b22d4482d4799ad884f Sha256 af63ef312848067342d80995fb0569363228cdc08bfbf84b43cb888dc9d79df9 Sha384 cf28bfa07068a259698516972788aa3ef3ffb12da76972515ca646261c97f49519a1b91032b2657e4a196d9e12fd9735 Sha512 41edfac0ac5b3490c022ed1e96094be58db5d4de30f7e51d239a1078cd1aea8505d76fbd4a09705853787886fe74db5af4a083e7a6aca9b04148c65064d83d6e SSDeep 12:5jEX/g6bTfQiCHeH1wUpdunP4gOxumLT925g9OZ8LLIp71nqe/Yao6:9EvH3QiK+0BOcmLT92+A8/Ip71nq0U6 TLSH 4BF0E1130769B958E103C9BE951B3E572A55B000344D0F8781ACE9AD5C44B359E7C3B6

3 malicious · 3 files
ZIPbe822e87b2126cc276809993317fcb42LOLBin
LNKDOC-MKRK10.lnkLOLBin
BIN[Lnk Summary]
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
Path arc:zip>lnk~T1059.003~T1202~T1204.002
Shape arc:zip>lnk
malicious 2 nodes

LNK: Command Execution UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential

3 malicious · 3 files
ZIPbe822e87b2126cc276809993317fcb42LOLBin
LNKDOC-MKRK10.lnkLOLBin
BIN[Lnk Summary]
No malware configuration was found at this point.

LNK: Command Execution UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
be822e87b2126cc276809993317fcb42 › DOC-MKRK10.lnk
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential
Sign in or create a free account to view the matching YARA rules. Create a free account
An error has occurred. This application may no longer respond until reloaded. Reload 🗙