Malicious
bfc6fa4a9d1e851362d1b48a26e5d961
ZIP Archive
MD5: bfc6fa4a9d1e851362d1b48a26e5d961
Size: 589 B
application/zip
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
ZIP archive
Size
589 B · 589 B
First seen
2026-08-03 11:09 · 2 months ago
Last seen
2026-08-03 11:09 · 2 months ago
Last analysis
2026-08-03 11:09 · 2 months ago
Hashes
MD5
bfc6fa4a9d1e851362d1b48a26e5d961
Sha1
1cb9a77ce2fd911c5e910bafd8b89620b83e00ad
Sha256
39da9c7087cb824c1d626d1f71b9cd34de3a8f5159384466907ee9fa94bf873d
Sha384
2463db38838621723206b9fe926401c2c8fd33e46d66e1f07aa9d125f2272f98a47d70d740860f5c7d2980f210e08736
Sha512
f8c07737514392303df9e9f8e55831c702b9835765e7234c52968e61d165d37e8626a400cf054e45fe60092c7fd2f8d3b3b867c63779e9bd8b2f81768d44918d
SSDeep
12:5jJvk0NB4vCgrSQX4IfMfG9uZT3e7DdfIsoA2FTuimtzzaor:9JTf4agrSitCG9kbsDdgszszczlr
TLSH
8DF026F227005D45CD255DF9853E267C64105BE54F5B81970B78C2488DF11E15F1B1F0
3 malicious · 3 files
ZIPbfc6fa4a9d1e851362d1b48a26e5d961T1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKDOC-TQ0SMF.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
arc:zip>lnk~T1059.003~T1202~T1204.002
Shape
arc:zip>lnk
malicious
2 nodes
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential3 malicious · 3 files
ZIPbfc6fa4a9d1e851362d1b48a26e5d961T1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKDOC-TQ0SMF.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
No malware configuration was found at this point.
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
bfc6fa4a9d1e851362d1b48a26e5d961 › DOC-TQ0SMF.lnk
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with EssentialSign in or create a free account to view the matching YARA rules.
Create a free account