Malicious
bfae9288e485484cc4e9bb7d9376a04d
ZIP Archive
MD5: bfae9288e485484cc4e9bb7d9376a04d
Size: 866 B
application/zip
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
ZIP archive
Size
866 B · 866 B
First seen
2026-08-03 13:27 · 2 months ago
Last seen
2026-08-03 13:27 · 2 months ago
Last analysis
2026-08-03 13:27 · 2 months ago
Hashes
MD5
bfae9288e485484cc4e9bb7d9376a04d
Sha1
799ce6abb32e9a1d51d7174c6a098923508d7b78
Sha256
de90629f05a791ec6156fc9463aa5ea34a0b079740c1ec13e29f5dae9ce141cc
Sha384
3f476f59dda0163ff851db5e985b2c24aff0573f8a4f584be700b0713a50f2864d1fa7ba055cbad90733e1a1b989c904
Sha512
7492ec3571f2caf5231f06d2af0cfed9a6c46deafc990b7dfa276de98a1c900c3a150361725cd94ee2240e22aba7709723347e4f8fae5a457d8a3bb71241f200
SSDeep
12:5jRMjxx9RsQRAcSenixmBMhPq9adpm7xBlkc3+Bl3X694042ujY4pHUpYMjviaos:9R8qQR5SeOdaxrkxl3XE40Ju0PpYOCkl
TLSH
87115EE3110BE46CCB608E76CAB609A0640974CAC23FFA90593D97232D272A2C6751B2
3 malicious · 3 files
ZIPbfae9288e485484cc4e9bb7d9376a04dT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKDOC-ORY4MU.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
arc:zip>lnk~T1059.003~T1202~T1204.002
Shape
arc:zip>lnk
malicious
2 nodes
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential3 malicious · 3 files
ZIPbfae9288e485484cc4e9bb7d9376a04dT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKDOC-ORY4MU.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
No malware configuration was found at this point.
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
bfae9288e485484cc4e9bb7d9376a04d › DOC-ORY4MU.lnk
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with EssentialSign in or create a free account to view the matching YARA rules.
Create a free account