Malicious
c1a472dd9752d4e689a9b7adb39b6552
ZIP Archive
MD5: c1a472dd9752d4e689a9b7adb39b6552
Size: 592 B
application/zip
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
ZIP archive
Size
592 B · 592 B
First seen
2026-08-04 08:07 · 2 months ago
Last seen
2026-08-04 08:07 · 2 months ago
Last analysis
2026-08-04 08:07 · 2 months ago
Hashes
MD5
c1a472dd9752d4e689a9b7adb39b6552
Sha1
82d9c7479b342b977d0eddfc3f9fbe2e145d420e
Sha256
c432d476ac0a5501cbebe3fd383ddf33731baffaf71b89e24280a544295fd15b
Sha384
151da959f86a05c0762e64bd8dab7bc63ab9bcb0eed051e2d80db855fa5e35d971e640bcfd069838f73c161bd4616432
Sha512
4250ad487ef4f95da7a4f2321342bc606a8cf33a360a75fc8628d1b79a726421705f4993ad74d150a3bca878a87584dbf43100dfcf00456bec788b354721f18d
SSDeep
12:5j3tLNtHRKSGATiq5xBCzFI0MfI77jgi+rx6bCBKiaoAt:93mSGATNYI0Mgfjcr8bCBrA
TLSH
46F041C2BA485139CA1EE5F51D32A624C7A6F7C5C03E3DD622EAF21218641582341C31
3 malicious · 3 files
ZIPc1a472dd9752d4e689a9b7adb39b6552T1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKDOC-BZTED3.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
arc:zip>lnk~T1059.003~T1202~T1204.002
Shape
arc:zip>lnk
malicious
2 nodes
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential3 malicious · 3 files
ZIPc1a472dd9752d4e689a9b7adb39b6552T1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKDOC-BZTED3.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
No malware configuration was found at this point.
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
c1a472dd9752d4e689a9b7adb39b6552 › DOC-BZTED3.lnk
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with EssentialSign in or create a free account to view the matching YARA rules.
Create a free account