Malicious
ca0997444c6bf11eb2363a170fc9ae08
ZIP Archive
MD5: ca0997444c6bf11eb2363a170fc9ae08
Size: 926 B
application/zip
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
ZIP archive
Size
926 B · 926 B
First seen
2026-08-04 08:37 · 2 months ago
Last seen
2026-08-04 08:37 · 2 months ago
Last analysis
2026-08-04 08:37 · 2 months ago
Hashes
MD5
ca0997444c6bf11eb2363a170fc9ae08
Sha1
9c30c4a84238daa7af0c5c584f7f87c0bc9fbc3a
Sha256
44cdc925dc417f4ced3cdfdbb3f08469a49ceac3822f9716f6fbdb2ca9a530f2
Sha384
5e03077408df07b689e5d230f45ccaaa6aacf272ff2c2d657373cb31bf0b37b8005065eb21eed7ac3774e1d3c3c6cc04
Sha512
72d91e3ce767fce3b4af58cc50c0924fcbb7f6736ba5f228438788daab7865e6a6d5b1d18545432e3fa82f445da94287cc8373a8a99eab30b9cab41132dcb87e
SSDeep
12:5j97qVaf1uNhSMAoCXaoX3hoaXoT4VdEO09UVLBePvdPE908pOI7zDaoYl:96afw+he8WaXoTYeJU1Y3dPmsI7pYl
TLSH
46118455E042D457E5E106B01D12BD11BF9A4AC840CE98FEA808790B6FE2B39AB942C7
3 malicious · 3 files
ZIPca0997444c6bf11eb2363a170fc9ae08T1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKDOC-95DUW9.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
arc:zip>lnk~T1059.003~T1202~T1204.002
Shape
arc:zip>lnk
malicious
2 nodes
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential3 malicious · 3 files
ZIPca0997444c6bf11eb2363a170fc9ae08T1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKDOC-95DUW9.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
No malware configuration was found at this point.
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
ca0997444c6bf11eb2363a170fc9ae08 › DOC-95DUW9.lnk
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with EssentialSign in or create a free account to view the matching YARA rules.
Create a free account