Malicious
ZIP Archive
MD5: c9a443e2b90441e99799ada4eeb60df7
Size: 840 B
application/zip
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
ZIP archive
Size
840 B · 840 B
First seen
2026-08-03 11:02 · 2 months ago
Last seen
2026-08-03 11:02 · 2 months ago
Last analysis
2026-08-03 11:02 · 2 months ago
Hashes
MD5
c9a443e2b90441e99799ada4eeb60df7
Sha1
fa404dca694e12433c7e682eea6a89895d49c81d
Sha256
ff9272f0e21cb6fc6732131eae9b211e303dd706a61836b6bfae66701848cf90
Sha384
e1528ba8334af3784d6f0d7cae92a95debac843d20fbfe7a30fe2e14cd9ed67cb616f97ce529dead44317322f655d871
Sha512
ab89877c41c9c6fbb65a85d810f0b252d794352ca88b9bc25b8f7a644fcf96b375885bc50b24cf6f4722319090e77000c90ed30469ca09ef444913be8677f2e0
SSDeep
24:9gHzCaAIvVfoXYiHFodXNBStbj3GIuqQeVeWCaSTKS972HzzPXb:9gTCWRDilkNBSl2qQeAna7Y2Tzvb
TLSH
5C01467F427CEECAC005D7B52A2976D5E5485D7820CB3AC36039E7A45C622EA032AE30
3 malicious · 3 files
ZIPc9a443e2b90441e99799ada4eeb60df7T1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKDOC-V0UM9P.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
arc:zip>lnk~T1059.003~T1202~T1204.002
Shape
arc:zip>lnk
malicious
2 nodes
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential