Malicious
caaf117fe10f4f694ed65ad79ff6cf3b
ZIP Archive
MD5: caaf117fe10f4f694ed65ad79ff6cf3b
Size: 856 B
application/zip
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
ZIP archive
Size
856 B · 856 B
First seen
2026-08-04 08:07 · 2 months ago
Last seen
2026-08-04 08:07 · 2 months ago
Last analysis
2026-08-04 08:07 · 2 months ago
Hashes
MD5
caaf117fe10f4f694ed65ad79ff6cf3b
Sha1
73972e361819c9b4eae0adcf518ad4a96b4c9fd6
Sha256
091ef979a2a609f99ee53a37cc22c9ed2a5d4d61e9ac8ed3509c709b79497548
Sha384
6969fb5435cca1c822e7fdb1ffd0cf8fad5cef82f409e009dfab764671c7e450c95f70bef640471874f4e4d5755e91d3
Sha512
f64605316845295fa98ea840a0339ac99070ad263a328e6b819794fd2a6d94bc5e2b5b174b9ba73d0f680f66e09c1488cf448965001659ac66047fe104346833
SSDeep
24:91014E4Jx7P56QsCPfzpQEj2cYekHuPuBOh7U6:9u2xJxT56GzpNqcLkOPtQ6
TLSH
6311862B5F72C31FD55667F75904310420D9F82341898F2021F2A904AD68A22B3B5E31
3 malicious · 3 files
ZIPcaaf117fe10f4f694ed65ad79ff6cf3bT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKDOC-0G2VT8.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
arc:zip>lnk~T1059.003~T1202~T1204.002
Shape
arc:zip>lnk
malicious
2 nodes
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential3 malicious · 3 files
ZIPcaaf117fe10f4f694ed65ad79ff6cf3bT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKDOC-0G2VT8.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
No malware configuration was found at this point.
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
caaf117fe10f4f694ed65ad79ff6cf3b › DOC-0G2VT8.lnk
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with EssentialSign in or create a free account to view the matching YARA rules.
Create a free account