Malicious
ZIP Archive
MD5: c04f7e11984acb7a258ac7e9ca8e0ace
Size: 587 B
application/zip
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
ZIP archive
Size
587 B · 587 B
First seen
2026-08-03 12:58 · 2 months ago
Last seen
2026-08-03 12:58 · 2 months ago
Last analysis
2026-08-03 12:58 · 2 months ago
Hashes
MD5
c04f7e11984acb7a258ac7e9ca8e0ace
Sha1
4906a7bfda5a8e5b77cfadb49ee52c8683d8917e
Sha256
d1e0cb8d2ca9adc83c0f81de32add0881ed9c08b5bb551950226ac5768f34a79
Sha384
bd0fddd93616e95bcbe3527f070a5fb3ec46235ae50f64257edfec991c0d9970733d7875daa87de0eacca1876ca635a1
Sha512
0aa8b99fcdbd4ad7bf457a03743d5fe64a919b63742046c3fcccd85f43c3eebcf1a5490df2cde1f8ba6e8a4d8ed9b931c6760bbed151b36a378b7df510aed874
SSDeep
12:5jS8MONHO0KUAqG7nS805ghXlqZU/i6vq3rbtUPrw+doErl1DnU8jOPaol:9e+HO0KTRPhmQAgwKh1rrUl
TLSH
7DF041D30B656808C489EB752B521C345111506601CFBF736984BD6C9EECC5E2C5DA10
3 malicious · 3 files
ZIPc04f7e11984acb7a258ac7e9ca8e0aceT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKDOC-FTSONN.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
arc:zip>lnk~T1059.003~T1202~T1204.002
Shape
arc:zip>lnk
malicious
2 nodes
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential