Malicious
ZIP Archive
MD5: c868609bf17c8c1758c86b62aaaeac48
Size: 834 B
application/zip
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
ZIP archive
Size
834 B · 834 B
First seen
2026-08-03 11:02 · 2 months ago
Last seen
2026-08-03 11:02 · 2 months ago
Last analysis
2026-08-03 11:02 · 2 months ago
Hashes
MD5
c868609bf17c8c1758c86b62aaaeac48
Sha1
427e376c09192a16d71e446a620d56bea7ef345b
Sha256
385e8ab661c2368528ce411d5b278034ce43b0b3197af3ae8ff551e5c133553f
Sha384
15b0b2f315880adbca6f4dc38b8721268e047afba78815fe53a58744233ca0d6a8603e6ce6dea9485d6c1d006575050d
Sha512
b266a18ee74c14f9edde7ebeafa59777f6ce9b96b90edcb6da4e3b63d5e09e1de9fa2fe603deae9e11907b246f2a24a5cc9065c89d402ebba94abebfed52cd63
SSDeep
24:9Ps5YH+oNDOgqYrlEkIZjq1yBjKj/hzMNJ0jRv72R5ZWqzB8Id:9PfH+opOExEjO4Buj/9Mb0jRD2RWql8a
TLSH
2F01CAC4EC2F1E24CD4F5C70E12159FB13FB609D0D9A451446141D578A241B6B7B37D2
3 malicious · 3 files
ZIPc868609bf17c8c1758c86b62aaaeac48T1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKDOC-NDACVR.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
arc:zip>lnk~T1059.003~T1202~T1204.002
Shape
arc:zip>lnk
malicious
2 nodes
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential