Malicious
ZIP Archive
MD5: cf42f4f8ba5d87cb813d5c8fde4b5819
Size: 592 B
application/zip
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
ZIP archive
Size
592 B · 592 B
First seen
2026-08-03 11:20 · 2 months ago
Last seen
2026-08-03 11:20 · 2 months ago
Last analysis
2026-08-03 11:20 · 2 months ago
Hashes
MD5
cf42f4f8ba5d87cb813d5c8fde4b5819
Sha1
0d0b5b3e0f11d2e587884b76c21a1da5537d94db
Sha256
60bdcae0bc42051d24904604c8ebca679a13bc78124b202e5190dbdc72ac6cc2
Sha384
c12106e119fa621dded576ed555b64e4e4efc8b9d2418e41a4b409a7430e91850190db83c11419d1c6fc237af145a1b7
Sha512
087e1a6270ce650adb9517ee4dd6f89ad8eeb7fcacdaae4f79756f70f5ea8bd066753f32215d4d508a0467c1a7f80f9d85978d25a6858523a8221ee86ea18b47
SSDeep
12:5jB3nJcXP7c0RrIHFHA7Zkv7FlEKNOjg/F5xVHjvMliaoAt:90/7ZBIHFg7+EKNOcN5xVDkCA
TLSH
E9F0E153122FD734F1C348F295722514AB4144378A1ABBFD663ADD332CD318B888C257
3 malicious · 3 files
ZIPcf42f4f8ba5d87cb813d5c8fde4b5819T1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKDOC-XOYNKI.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
arc:zip>lnk~T1059.003~T1202~T1204.002
Shape
arc:zip>lnk
malicious
2 nodes
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential