Malicious
ZIP Archive
MD5: c86ad589542ac47f7274730b56c165ae
Size: 943 B
application/zip
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
ZIP archive
Size
943 B · 943 B
First seen
2026-08-03 11:26 · 2 months ago
Last seen
2026-08-03 11:26 · 2 months ago
Last analysis
2026-08-03 11:26 · 2 months ago
Hashes
MD5
c86ad589542ac47f7274730b56c165ae
Sha1
ef5f97767795c0c20da6e3bdeba87d3c60c5fd11
Sha256
b5945eb8b8e8817182abd7c869d03cecdfe60ff7f09859abd201d6007a95a756
Sha384
679fb44de951ff2d804fd495d3e40cedf1a54e47a7690b96f39f87e91ae02ee86348a9228532637a4954758e43f111df
Sha512
33e4de6445427b0b0e63a089ccbc54bf920e3c121a7215f128f6953d8bb2f681de15f312973eb176c1f31b758ad6ddff2482b16ac92743c72b241577fa1cc836
SSDeep
24:9xVEDXKFssJPuurntXUW6w2m/pJORREv8b:9xCjKFbJPu6NKPm/oEv8b
TLSH
BC1190D33F42A821E980A0B2C6908089026882AC2A0FD08E7F83D4D30883A6D2A126B4
3 malicious · 3 files
ZIPc86ad589542ac47f7274730b56c165aeT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKDOC-RASXVF.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
arc:zip>lnk~T1059.003~T1202~T1204.002
Shape
arc:zip>lnk
malicious
2 nodes
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential