Malicious
ZIP Archive
MD5: bfb70db5c1b68ea086c473e8eab6860d
Size: 586 B
application/zip
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
ZIP archive
Size
586 B · 586 B
First seen
2026-08-03 12:59 · 2 months ago
Last seen
2026-08-03 12:59 · 2 months ago
Last analysis
2026-08-03 12:59 · 2 months ago
Hashes
MD5
bfb70db5c1b68ea086c473e8eab6860d
Sha1
05178ef30d05ed88bf922d7c4272ddeee3137a9b
Sha256
23ed329096105820766957d270d295e0c696f9b8f3a4232cd27030435b8afa49
Sha384
e369a3b82a4fd41cd0c26c0f69208ddbfa40503c56ace1891f71ac264151eedcd20c4fa31321fe7ba6e905d50a41da97
Sha512
c0c3efdcffb6dcb6778da02a9fc7b076eec8395e3c5156f6a67e9a0929d6d8fbe70de56b48b5f77a9f3176276f8c3802314859dbdf7fefc93bf241fb3889f938
SSDeep
12:5jl8a/ao4986m/36wAf/52cKSzbomaOTwdP92K66U/RauaoSt:9D/a7ZTZ2cKS/fvMRZlUYeSt
TLSH
62F041D7DC29E0C4C721E4FD994E5A315869C14D80058FA125BCF253C8C41E9FF00890
3 malicious · 3 files
ZIPbfb70db5c1b68ea086c473e8eab6860dT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKDOC-HTXXA6.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
arc:zip>lnk~T1059.003~T1202~T1204.002
Shape
arc:zip>lnk
malicious
2 nodes
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential