Malicious
ce1682b4a8542d3f6d08fa0b36773434
ZIP Archive
MD5: ce1682b4a8542d3f6d08fa0b36773434
Size: 622 B
application/zip
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
ZIP archive
Size
622 B · 622 B
First seen
2026-08-03 08:51 · 2 months ago
Last seen
2026-08-03 08:51 · 2 months ago
Last analysis
2026-08-03 08:51 · 2 months ago
Hashes
MD5
ce1682b4a8542d3f6d08fa0b36773434
Sha1
5f955033ce2be0dc0bfaca595352985fb3eb206d
Sha256
8a3b6f0652c15c5ce22204b224f10f5e83ae1dde977f8a77647e6dc06ac28f5f
Sha384
7f9b6aca76cb60506f389f660774d800fdd8409f0234fb6c2281cdd2d9f5c75eec9af56c492fe6843ed2ee6d60b54f9d
Sha512
d09b2a9ea7c9795cb1e96d2194d572ded56bafd9e7f37d6c63cb9851690643fe2c79936add2e5b941fddbb27878e8d8ab0f11d1b270652eb1e87c3329691f071
SSDeep
12:5jhjSzGXCMh8Ab4vKQnEOJ5TK6UM32XgqtNUwFEWStK1bjSznXcau:91SziCM2UclnESK6wJeWv1HSzXO
TLSH
11F00281C926C401F900D57B1D0B502B4CD8A283191FFBF6B888D72964A0A21C3B82C4
3 malicious · 3 files
ZIPce1682b4a8542d3f6d08fa0b36773434T1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKALVESHOTEL_VOUCHER--YYXQAQ.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
arc:zip>lnk~T1059.003~T1202~T1204.002
Shape
arc:zip>lnk
malicious
2 nodes
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential3 malicious · 3 files
ZIPce1682b4a8542d3f6d08fa0b36773434T1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKALVESHOTEL_VOUCHER--YYXQAQ.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
No malware configuration was found at this point.
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
ce1682b4a8542d3f6d08fa0b36773434 › ALVESHOTEL_VOUCHER--YYXQAQ.lnk
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with EssentialSign in or create a free account to view the matching YARA rules.
Create a free account