Malicious
ZIP Archive
MD5: c1c9ebd08cb78b7b63d25a7d0814fc5c
Size: 592 B
application/zip
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
ZIP archive
Size
592 B · 592 B
First seen
2026-08-03 12:14 · 2 months ago
Last seen
2026-08-03 12:14 · 2 months ago
Last analysis
2026-08-03 12:14 · 2 months ago
Hashes
MD5
c1c9ebd08cb78b7b63d25a7d0814fc5c
Sha1
019657461eab98d3b0958678f896f3aebf8b2943
Sha256
25579d908153d65d5edb899958dc0618409daa963cc7c21371b46295cdd00159
Sha384
da0bcff63bfc4a6772c3b3258bccb1111205625c1fe0f3ad5244a60731948eef3bab80bcfdd7cf274d34cf645534ba39
Sha512
b0ecbc43f9403e8e6e0185f6cef7521ee6b20b60fb5391bd98bc99cd86928e580ee53f7e73e079092148d2787ffd48c572de97a5c9ee9d0ede6c3b6b7f3b8995
SSDeep
12:5jIe2qzhPxKASDo0ZUafPcoAAgaSMXHAw4R68R/ZTzhZBUP0GzhVdmTrBee2q2hG:9Iezt0Aeo0Z1fPcPAf4N/nGzhCTrBee3
TLSH
E5F047D55E1D54C1CA91D33CECF28A29141447195457135B7512B05F8BAA6FC5869D10
3 malicious · 3 files
ZIPc1c9ebd08cb78b7b63d25a7d0814fc5cT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKDOCpdf2107-4KYEM0.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
arc:zip>lnk~T1059.003~T1202~T1204.002
Shape
arc:zip>lnk
malicious
2 nodes
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential