Malicious
d217b6583a5699447e19a54bf1be3169
ZIP Archive
MD5: d217b6583a5699447e19a54bf1be3169
Size: 589 B
application/zip
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
ZIP archive
Size
589 B · 589 B
First seen
2026-08-04 08:06 · 2 months ago
Last seen
2026-08-04 08:06 · 2 months ago
Last analysis
2026-08-04 08:06 · 2 months ago
Hashes
MD5
d217b6583a5699447e19a54bf1be3169
Sha1
61e3d5397a15e45d3a2f069e8a49b291a132a4e6
Sha256
852b4d3300468748b79be7bf6252d3b6163c2793b12aca29f62c58d6d10328d4
Sha384
66bf2761fb26621b704c662223460dec8f42e048ee93cda15864b92ea6bb0082348b4709acf0bfcefd4c3601372ca00b
Sha512
a662d8bd15e10674d178b85cc52c6342209f421ce7836e250f497d216ea846f4c364c7919dd848e65f00123ee121a14386a63fb556097227d6543ef109ae6ddc
SSDeep
12:5jUqrL8jczcliPbcVv/WE/HHF2ESfd9SZhpu7Gcx1zUj2Zt2lVZySd/tBaqycaor:9VrL8jbliPbcVv/WEPM39YuCy2E2HZl1
TLSH
77F041268263DA14F149547909230F91430046C74BA31B0BC22CCBAD5AAABE50898075
3 malicious · 3 files
ZIPd217b6583a5699447e19a54bf1be3169T1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKDOC-ZN4NE8.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
arc:zip>lnk~T1059.003~T1202~T1204.002
Shape
arc:zip>lnk
malicious
2 nodes
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential3 malicious · 3 files
ZIPd217b6583a5699447e19a54bf1be3169T1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKDOC-ZN4NE8.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
No malware configuration was found at this point.
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
d217b6583a5699447e19a54bf1be3169 › DOC-ZN4NE8.lnk
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with EssentialSign in or create a free account to view the matching YARA rules.
Create a free account