Malicious
ZIP Archive
MD5: ca1acaa22a9ab29b5bfa298bccf8e687
Size: 584 B
application/zip
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
ZIP archive
Size
584 B · 584 B
First seen
2026-08-03 12:58 · 2 months ago
Last seen
2026-08-03 12:58 · 2 months ago
Last analysis
2026-08-03 12:58 · 2 months ago
Hashes
MD5
ca1acaa22a9ab29b5bfa298bccf8e687
Sha1
c737f45d375db310d23aacbec8fec28ed05ced28
Sha256
9a1a2d6e55d5320add69d066fe20bcf4f28e9c1428c30f7eca6a712b7fcbf37d
Sha384
c40af1d5b73b1363fc1e2e577e5948abccf1c5cd0eee175c15019c4a7694270642fc00bc0a5d4a9a2bcde58c73358829
Sha512
db428fe1daac23c589030028e74083f33b1eea8d881a29cbf3cf10576eb7a99b2e71135ad98fddc389c6bbc8056e3ee1e6754a7e1bf43b1c635ba4a9d87f5873
SSDeep
12:5jKZuKvI+ypHReVkTiTi7hrS1O3jRWuOg57ySFYNgZ/aoo:9KEdjc2Wg59F4g/o
TLSH
40F0EBF3B22D522BC548C2B1987BBFC440488102521A7C39E5F1E54F3D691CA2B5BA28
3 malicious · 3 files
ZIPca1acaa22a9ab29b5bfa298bccf8e687T1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKDOC-2O3SMA.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
arc:zip>lnk~T1059.003~T1202~T1204.002
Shape
arc:zip>lnk
malicious
2 nodes
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential