Malicious
beb1c91f67fba1a4f36f0801ae56c1c4
ZIP Archive
MD5: beb1c91f67fba1a4f36f0801ae56c1c4
Size: 594 B
application/zip
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
ZIP archive
Size
594 B · 594 B
First seen
2026-08-03 11:12 · 2 months ago
Last seen
2026-08-03 11:12 · 2 months ago
Last analysis
2026-08-03 11:12 · 2 months ago
Hashes
MD5
beb1c91f67fba1a4f36f0801ae56c1c4
Sha1
23ead38616b0dce569149f76219095ef510e5eb2
Sha256
edaf7e642c1f9b656a3e9a6ac7b54cc6acada92a6eeff5f980301f7268871835
Sha384
2ad1b247355d663b76881c53988a1a3707b734c929776e9b3173df4edd75de1d5f56445196544fb0796e63d44011230f
Sha512
586ec70fce0c9e3556e13d969fc59dae46cf8611ef14afed52aa86649e8576086e106c08e16e712a461794ecb7c1db6bafafb679a2b455eeb359a9cf78f0b3ae
SSDeep
12:5jdfDwkDuOY0HOjuuFe5fecbsQKuRVDzXUoeuolKAbWTLkHmXCkaoN:9dZlRgF8b73DzoMIHmXhN
TLSH
F6F0E13F25994854E55591F5F7172EDD72F07300214EAFC9128E7D4F495C2A5CE821B0
3 malicious · 3 files
ZIPbeb1c91f67fba1a4f36f0801ae56c1c4T1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKDOC-TH4HH2.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
arc:zip>lnk~T1059.003~T1202~T1204.002
Shape
arc:zip>lnk
malicious
2 nodes
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential3 malicious · 3 files
ZIPbeb1c91f67fba1a4f36f0801ae56c1c4T1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKDOC-TH4HH2.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
No malware configuration was found at this point.
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
beb1c91f67fba1a4f36f0801ae56c1c4 › DOC-TH4HH2.lnk
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with EssentialSign in or create a free account to view the matching YARA rules.
Create a free account