Malicious
ZIP Archive
MD5: d294d05ba18a499e8f2bdb545eaf72a4
Size: 586 B
application/zip
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
ZIP archive
Size
586 B · 586 B
First seen
2026-08-04 08:19 · 2 months ago
Last seen
2026-08-04 08:19 · 2 months ago
Last analysis
2026-08-04 08:19 · 2 months ago
Hashes
MD5
d294d05ba18a499e8f2bdb545eaf72a4
Sha1
ca6f6ab79600e45ffad69bd0e51f84f4253b3965
Sha256
930b77fd1a0b309c398044a907c5c6250bad15acf8264e4866ded291b5685f4e
Sha384
ff98ccdc0ab4c66286382d319db5fe2a19a024835d9d129282c2e6978181a01d32d8c04a00a931a42aa231f191c7829a
Sha512
9dbe0fc158533377d666783b341fa13c506b83e3e5847e079cc42dc54db3442b5f04ea42b39057268aab9960dc16b2a41ac67cc082a2c7988b57f3074502f98b
SSDeep
12:5jcbN7g/NtLWEGVm5qU1zCYVA8xrkH0ZB2FaoSt:9cbN7UNtoUUI/4H0ZB2jSt
TLSH
52F0E16BD3A2C929C8E353B6C6E4232E94634C090E23590A6D6BF252891955E42BE438
3 malicious · 3 files
ZIPd294d05ba18a499e8f2bdb545eaf72a4T1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKDOC-54TNGO.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
arc:zip>lnk~T1059.003~T1202~T1204.002
Shape
arc:zip>lnk
malicious
2 nodes
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential