Malicious
c499f30f2a20ecbe23602991e2e5727b
ZIP Archive
MD5: c499f30f2a20ecbe23602991e2e5727b
Size: 590 B
application/zip
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
ZIP archive
Size
590 B · 590 B
First seen
2026-08-04 08:37 · 2 months ago
Last seen
2026-08-04 08:37 · 2 months ago
Last analysis
2026-08-04 08:37 · 2 months ago
Hashes
MD5
c499f30f2a20ecbe23602991e2e5727b
Sha1
0fbc28552123cd3dd92a2fb2fa63e3da33895331
Sha256
cb90e33355df71cf55a7bf7f9513390d83a3125538194568d370f442fb4f1ecb
Sha384
2c0923c1bf2a14603fbed7d282f0ea5b4ed0fa2e1c52d84a510b832b3019e8fe08e95c691f0cf7be94c221bf61fb9537
Sha512
7eb437b97cc26d638f1cd38cce04870be97ca1e826baadaf3b8bc4a23f43c6484e6220051a977fd553e241365739764ce0d0ef8a36e5d1a4ab4c3aad220576bc
SSDeep
12:5jrSUcFJRkr5Y1BWyKn5X7FqDWNkZnC3Bi1tTxFh34DBjkjuCHHVmVSUyJao6:9r1yfkgWZpADWNkZkYL1L4NjkjDHVmVL
TLSH
24F04789D986F015C95CFB79D237F86A0427E71212B50E012E54850275B65B259BF074
3 malicious · 3 files
ZIPc499f30f2a20ecbe23602991e2e5727bT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKDOC-098I1X.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
arc:zip>lnk~T1059.003~T1202~T1204.002
Shape
arc:zip>lnk
malicious
2 nodes
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential3 malicious · 3 files
ZIPc499f30f2a20ecbe23602991e2e5727bT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKDOC-098I1X.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
No malware configuration was found at this point.
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
c499f30f2a20ecbe23602991e2e5727b › DOC-098I1X.lnk
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with EssentialSign in or create a free account to view the matching YARA rules.
Create a free account