Malicious
cafff2969250bc9d33e43c6012a8ca91
ZIP Archive
MD5: cafff2969250bc9d33e43c6012a8ca91
Size: 949 B
application/zip
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
ZIP archive
Size
949 B · 949 B
First seen
2026-08-04 08:36 · 2 months ago
Last seen
2026-08-04 08:36 · 2 months ago
Last analysis
2026-08-04 08:36 · 2 months ago
Hashes
MD5
cafff2969250bc9d33e43c6012a8ca91
Sha1
fc67fafb924b22cec276fd6674323435657a2096
Sha256
46b8812aa75d6befc3ba1ce06d649ce08d1331565eff072226aa63c805c218a0
Sha384
eac01f0e328367e0664fa79593a3d0fb923c7dd81474b82a2278f46e1273e4c11f705a8d6b50f3d6315d419ec186ff75
Sha512
3a8c4f68231c539f503ec4ed2326fc3cd444bfbd1d715c9c61731ac99e2ca2ce21588054ca7b019b680d96fc886bccd2fc3b65caaf8aa8a591158f2ed4319b70
SSDeep
24:95oIQwstcAXuFvoGndCnl1AUr+Nd8WL8gSqBCLjAn7B:9xQiA6nAnwUE+O8DqajAn7B
TLSH
791150E72881BC16D0818C794590522E57930179A192DA2B1C6F639E22E23CF5A59AA3
3 malicious · 3 files
ZIPcafff2969250bc9d33e43c6012a8ca91T1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKDOC-PINIHL.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
arc:zip>lnk~T1059.003~T1202~T1204.002
Shape
arc:zip>lnk
malicious
2 nodes
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential3 malicious · 3 files
ZIPcafff2969250bc9d33e43c6012a8ca91T1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKDOC-PINIHL.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
No malware configuration was found at this point.
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
cafff2969250bc9d33e43c6012a8ca91 › DOC-PINIHL.lnk
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with EssentialSign in or create a free account to view the matching YARA rules.
Create a free account