Malicious
ZIP Archive
MD5: caf29824ccf83274c2965283a70b3ffd
Size: 965 B
application/zip
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
ZIP archive
Size
965 B · 965 B
First seen
2026-08-03 13:33 · 2 months ago
Last seen
2026-08-03 13:33 · 2 months ago
Last analysis
2026-08-03 13:33 · 2 months ago
Hashes
MD5
caf29824ccf83274c2965283a70b3ffd
Sha1
cd4ae4cf09ac50fef01adaa2be1db231d4614c85
Sha256
d7b61b0517c93af0a20e589b658b4e16f357d200d22a7d3f76807e49e66d4ab1
Sha384
978525da208c880a7a6d3d506d9991bf1c6cb3152499de49967beafd91e51cbdf6245e4c9ceeca76d1e5fd695602f785
Sha512
7e1d81d55be58f676d7cd7bbf91ba621bdc42c0e10ce32020dcd7566918caf4305969f3e3e777b9689ebb54e7608e91b225119f874ac90a6941a4a9f0923b579
SSDeep
24:9QHqjp+OmT0VXYVyOb1LJQ8zpkf9WXSY5GAm87VCN3A/yJ21GHqJx:9QHqN+roVXYz5LJfXPld7UNqywGHqJx
TLSH
A111C4C6F764E849E3B801F990C5241230243800BADAD8CFD10242C698ADCC2C9CA5B0
3 malicious · 3 files
ZIPcaf29824ccf83274c2965283a70b3ffdT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKDOC-9OJ5XP.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
arc:zip>lnk~T1059.003~T1202~T1204.002
Shape
arc:zip>lnk
malicious
2 nodes
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential