Malicious
d049be3db7b0ae7d5b770d5f5e0a9964
ZIP Archive
MD5: d049be3db7b0ae7d5b770d5f5e0a9964
Size: 902 B
application/zip
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
ZIP archive
Size
902 B · 902 B
First seen
2026-08-03 13:27 · 2 months ago
Last seen
2026-08-03 13:27 · 2 months ago
Last analysis
2026-08-03 13:27 · 2 months ago
Hashes
MD5
d049be3db7b0ae7d5b770d5f5e0a9964
Sha1
63bfe392a8efe69a1d2e55b6fd8bf3d775100dad
Sha256
69a71e98cb63bcae48c10d1894bfc17655f1196a75cef813d5510f40b6f5fa5e
Sha384
b5280e55245e4ba518352de4f7b5c9be7c19764e162f30beeaee39c7109d7027b8a76930ce798953f8e412974f0b40f2
Sha512
f8cdbb16746fa6180b4aeee140198c0cb7b8b3609e0078b9681adcfe94215a4e2640158c189b89145a23ad339dfe2b68f4ff64b6b19b8a83e4b81e14387d0aec
SSDeep
12:5jAELZ4DGAAV2GYwGxJvmiXSyyg7a9wGHgIJY/rUsY0t6Md0EySFiaZoLg/BqELk:9vZ4DBAAEGxlnyg6oxMsrZyIBVaQAl
TLSH
8511632B5B2CDCA1DB8D8ABC432D2823E3B1C0B1804B0742976486CDB73A169167E5D7
3 malicious · 3 files
ZIPd049be3db7b0ae7d5b770d5f5e0a9964T1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKDOC-OFLWX5.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
arc:zip>lnk~T1059.003~T1202~T1204.002
Shape
arc:zip>lnk
malicious
2 nodes
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential3 malicious · 3 files
ZIPd049be3db7b0ae7d5b770d5f5e0a9964T1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKDOC-OFLWX5.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
No malware configuration was found at this point.
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
d049be3db7b0ae7d5b770d5f5e0a9964 › DOC-OFLWX5.lnk
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with EssentialSign in or create a free account to view the matching YARA rules.
Create a free account