Malicious
ZIP Archive
MD5: d1d41d53af5af60d8483457f929fc8a9
Size: 590 B
application/zip
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
ZIP archive
Size
590 B · 590 B
First seen
2026-08-03 11:08 · 2 months ago
Last seen
2026-08-03 11:08 · 2 months ago
Last analysis
2026-08-03 11:08 · 2 months ago
Hashes
MD5
d1d41d53af5af60d8483457f929fc8a9
Sha1
eac7593610a99f7973d33435b1ee77505894070c
Sha256
db7ea2a535cccee81d7ce4b1cbc2a5c6b8dcdd4b956eb4b2729c70f99165d59e
Sha384
8fc825320097e492e4d19864a3587fe5789c52da9702a4c484deda4fa4a61c5292638eb6fb48e1ad59adab0166b9cad1
Sha512
1815ed2b9b187d277e3ba2acd8f4fa8bc14e99b9440628ab492228ec0db31e94770370473ce3644e30e5f0aa894f8cc0356f23d9e40c94a98b3ea1c463797619
SSDeep
12:5jti73E80Gq9gHgsUlWjZax5LQl9iJs+e9NDqmrtGmSHi0Yao6:9tkI9gb2zkz5XzGuGFHO6
TLSH
42F026332D126013D7B9A7B251A270560730171C5C7D591F75BC6C40DA5D54AF401C14
3 malicious · 3 files
ZIPd1d41d53af5af60d8483457f929fc8a9T1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKDOC-V72GCH.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
arc:zip>lnk~T1059.003~T1202~T1204.002
Shape
arc:zip>lnk
malicious
2 nodes
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential