Malicious
ZIP Archive
MD5: bf9d6fbbfebe30d119752b41394d12ad
Size: 932 B
application/zip
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
ZIP archive
Size
932 B · 932 B
First seen
2026-08-04 08:17 · 2 months ago
Last seen
2026-08-04 08:17 · 2 months ago
Last analysis
2026-08-04 08:18 · 2 months ago
Hashes
MD5
bf9d6fbbfebe30d119752b41394d12ad
Sha1
8c50bff31357b26817f745eeb3f393eba76e0c3c
Sha256
0c60d05cb6955d6e434881bf41d8d82dd659f51508fc372e7d9714d628de0917
Sha384
04302996856bac6683cdde21ff49312310dd4b309324ae3e707396c85948e210e757e8087f5e11cbb08fb5ff63741160
Sha512
14e68923cc544192cde971cc1362aa61af8b49aba44afc44a52eab168bad4d4db47b63c8ee70330f97a46eb025c79d998727070b70d2621fa4df81673600c8a6
SSDeep
24:9Paqew8FHc9KRXghIw0NC3TK38Kx0Lf92cBaqhUyl:9rebO9U6KC3THFLlnJhU2
TLSH
8711B7A34D030371DCA2C0773C98F94BC15830997A0BFEA1B0ACC2323B248AE9743816
3 malicious · 3 files
ZIPbf9d6fbbfebe30d119752b41394d12adT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKDOC-M6O3CN.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
arc:zip>lnk~T1059.003~T1202~T1204.002
Shape
arc:zip>lnk
malicious
2 nodes
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential