Malicious
c863364d434c0f2d5182269548f40d53
ZIP Archive
MD5: c863364d434c0f2d5182269548f40d53
Size: 954 B
application/zip
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
ZIP archive
Size
954 B · 954 B
First seen
2026-08-03 13:41 · 2 months ago
Last seen
2026-08-03 13:41 · 2 months ago
Last analysis
2026-08-03 13:41 · 2 months ago
Hashes
MD5
c863364d434c0f2d5182269548f40d53
Sha1
6d02739532dce9954e0de66b33c7ac5cd3101aac
Sha256
7a6829e32c6d3ec6bc9020396c393631fa39ab20627f8ed2224e8f01fe12a2b8
Sha384
0fb15415cdf3deb4eca99b87124630e59a4e74fbcca078a9470b3f9c568b2743853431e3b1afe35283960879752de7c1
Sha512
c5261a4d410d23853d0e168f10c2cc6f1842a673692b87923bd068bbd7892a4336cb6c23262f6a5baf861df3114ed66e5ff5668d52b4ac782eb2ccef1ff88700
SSDeep
12:5jORl3o1lwrZIBuIe6n3AuSlBoHfSV0uNAN8LVC6qsJeMCqPFBQTFenIXscJao0:9sxo1cOBle0KASV0JCH3JXFFBQT8mB0
TLSH
371121698A2605C8C68F9575A1F45F3E909CB9722841687710BFF8470AAA0BCAF68744
3 malicious · 3 files
ZIPc863364d434c0f2d5182269548f40d53T1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKDOC-Q92PRF.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
arc:zip>lnk~T1059.003~T1202~T1204.002
Shape
arc:zip>lnk
malicious
2 nodes
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential3 malicious · 3 files
ZIPc863364d434c0f2d5182269548f40d53T1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKDOC-Q92PRF.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
No malware configuration was found at this point.
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
c863364d434c0f2d5182269548f40d53 › DOC-Q92PRF.lnk
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with EssentialSign in or create a free account to view the matching YARA rules.
Create a free account