Malicious
Malicious

c1e1824f9f2c0d10bdaa106d2b704d11

ZIP Archive
MD5: c1e1824f9f2c0d10bdaa106d2b704d11
Size: 591 B
application/zip

This sample is a 591 bytes ZIP Archive for which Malva.RE's static analysis did not establish a malicious verdict. Static analysis extracted 2 embedded or derived files. It matches 1 YARA rule. Observed behaviours map to MITRE ATT&CK T1059.003, T1202: INDIRECT COMMAND EXECUTION and T1204.002. The file was analysed statically: it was parsed and decompiled, never executed.

SHA256
84d58ca19574555aa3f2901b3c20173262da77f627751b7651f64d0435d36fd8
MD5
c1e1824f9f2c0d10bdaa106d2b704d11
Verdict
Malicious
File type
ZIP Archive · 591 bytes
Category
LOLBin

Cite this report: https://app.malva.re/sha256/84d58ca19574555aa3f2901b3c20173262da77f627751b7651f64d0435d36fd8

Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential

File
Type
ZIP archive
Size
591 B · 591 B
First seen
2026-08-03 11:29 · 2 months ago
Last seen
2026-08-03 11:29 · 2 months ago
Last analysis
2026-08-03 11:29 · 2 months ago
Hashes
MD5 c1e1824f9f2c0d10bdaa106d2b704d11 Sha1 327d2974984825a77706e5208c75baaa48f71586 Sha256 84d58ca19574555aa3f2901b3c20173262da77f627751b7651f64d0435d36fd8 Sha384 46f40f59a68344d8c2fc61eb53fce79ee937293e7d606333c0ee48463f6fb61e28684c389fc12fbbf137b7d4f68c2a50 Sha512 61fa2a4054d3cf3ddf51415c05c44c066c4b993d93ce60343aae5aa7fd044828f087c3b30c54f6b0ad25fc4798740a5fdfeffd5b762a853b720bef2f59475cbb SSDeep 12:5j8VbQuY8c+yBEvw0cOfaBc7z8B/Xl8BV9aBH9fr3AusVaox/:98VUuYB2vwSiBmS/Xle9aBH98uszx/ TLSH B1F0E1F712303818F34B40F7B2A3543B580D6A5A88274649562EE78D5B314D78E1949D

3 malicious · 3 files
ZIPc1e1824f9f2c0d10bdaa106d2b704d11LOLBin
LNKDOC-AK9PRD.lnkLOLBin
BIN[Lnk Summary]
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
Path arc:zip>lnk~T1059.003~T1202~T1204.002
Shape arc:zip>lnk
malicious 2 nodes

LNK: Command Execution UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential

3 malicious · 3 files
ZIPc1e1824f9f2c0d10bdaa106d2b704d11LOLBin
LNKDOC-AK9PRD.lnkLOLBin
BIN[Lnk Summary]
No malware configuration was found at this point.

LNK: Command Execution UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
c1e1824f9f2c0d10bdaa106d2b704d11 › DOC-AK9PRD.lnk
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential
Sign in or create a free account to view the matching YARA rules. Create a free account
An error has occurred. This application may no longer respond until reloaded. Reload 🗙