Malicious
ZIP Archive
MD5: d22d9b4354e69042466f6e96e36a5dd0
Size: 590 B
application/zip
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
ZIP archive
Size
590 B · 590 B
First seen
2026-08-03 11:23 · 2 months ago
Last seen
2026-08-03 11:23 · 2 months ago
Last analysis
2026-08-03 11:23 · 2 months ago
Hashes
MD5
d22d9b4354e69042466f6e96e36a5dd0
Sha1
65b3481889e800b9ffc3b5834f7ccfe6488006eb
Sha256
7a50f22166175793043854d92e618dc949f872c0a326cb6174088fa1e9784b52
Sha384
25d1f3ee38feb2fe549231d9252cbf8c9498912960e628a88538fabc1af00d7ee93a6d2f4c52c2cc9f0f6300a32e08ce
Sha512
6870a6600d0e04876edb97245655fdcb2cb975efcd2c0958908e5782b81b610cc87220ccce27939678cbb90c3ec451c6e765af36dd4ee808708bc34e821a1755
SSDeep
12:5jpym/KryMOH1t61EVrHvJrsMlbkW7P1mAD9aRpmwPiaBBDHmliao6:9py9uMuM4HvJ/kW7P1mADIRpVPJBBDHG
TLSH
B3F0E19789A184C8D5D3D4F42DB556A7C61CF1C6748AB82D4E29C89F054348F4B5A690
3 malicious · 3 files
ZIPd22d9b4354e69042466f6e96e36a5dd0T1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKDOC-H2CAD1.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
arc:zip>lnk~T1059.003~T1202~T1204.002
Shape
arc:zip>lnk
malicious
2 nodes
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential