Malicious
ZIP Archive
MD5: bf2fab4c5cbb1c702bf97d9764351a97
Size: 594 B
application/zip
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
ZIP archive
Size
594 B · 594 B
First seen
2026-08-03 10:59 · 2 months ago
Last seen
2026-08-03 10:59 · 2 months ago
Last analysis
2026-08-03 10:59 · 2 months ago
Hashes
MD5
bf2fab4c5cbb1c702bf97d9764351a97
Sha1
8bc695d27604b5018faf53513f4047b32de64f5b
Sha256
f9eb4ec85db3e09f293c536edf709a443ed83d88510bb9050055802ebb9bc5c7
Sha384
6251da6eed67e15d5ddbafea4dcf3d7d953f3b364753f4d2082a4b9f21924f85377211221c62d2b10a9409e9c8d7e5d1
Sha512
28fd2a3020bcf95106328b6c26616ef8c669224e3a009faf9e81bbdbc4f58e65073ab2fbc07cdd42614805491c942d6c11abe72cfa9ae8a070e9b3871f946f81
SSDeep
12:5jssLxeTxWSsfm0vbRxZv0dE6M8Xv2IlG3qcJ82CdL6aoN:9ssNuYS6mAFv0dhpXv3GaktCdeN
TLSH
37F026CF0F740423E1865BB3B8711D298777E21BB55B1A150C1CE60D8EA9600F9DD0A4
3 malicious · 3 files
ZIPbf2fab4c5cbb1c702bf97d9764351a97T1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKDOC-VI5Y1A.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
arc:zip>lnk~T1059.003~T1202~T1204.002
Shape
arc:zip>lnk
malicious
2 nodes
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential