Malicious
ZIP Archive
MD5: cb3917249a05d40b4d8999efe3b54f11
Size: 907 B
application/zip
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
ZIP archive
Size
907 B · 907 B
First seen
2026-08-04 08:07 · 2 months ago
Last seen
2026-08-04 08:07 · 2 months ago
Last analysis
2026-08-04 08:07 · 2 months ago
Hashes
MD5
cb3917249a05d40b4d8999efe3b54f11
Sha1
e412b2233a8763d22aad8feb4c97c64d10259477
Sha256
24182259477c8cd24b546a886ae180db13c5e85193cba77206a782c29c0008b8
Sha384
863352301b6d6b15a5b80d14a71bdd7506bedc30361000688696df875af92473893b6b631ac75ca8b2831776396839dc
Sha512
88016629c8b12302d181d09c83a4167afbf1798350970292ce2023fe6a08620bb34e8fb268bc896d0a825d2082d4ec58d4fed0574dd8bc461b97ee2a5cd6fe4c
SSDeep
24:966eA77ph7C5wjNLHK8GFMBKqLyjVkv/wuvUH:966eAHcANoOBK8ypkv/pvUH
TLSH
B41163E472B5C012DE079D3B1B7C621BA109C4C416CF638179A194290DF59E19B1C61D
3 malicious · 3 files
ZIPcb3917249a05d40b4d8999efe3b54f11T1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKDOC-XSFNYC.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
arc:zip>lnk~T1059.003~T1202~T1204.002
Shape
arc:zip>lnk
malicious
2 nodes
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential