Malicious
ZIP Archive
MD5: d4196b9e9d19fbfcd01ffc2d5d4c90a0
Size: 836 B
application/zip
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
ZIP archive
Size
836 B · 836 B
First seen
2026-08-04 08:22 · 2 months ago
Last seen
2026-08-04 08:22 · 2 months ago
Last analysis
2026-08-04 08:22 · 2 months ago
Hashes
MD5
d4196b9e9d19fbfcd01ffc2d5d4c90a0
Sha1
a0dce2fee03eb949b9d3ee8fa760397b1a19eb8b
Sha256
26bbefef7ecc028554af5cab37f61a00bf316037a6bf60866ace7482a0f740ac
Sha384
e7bea9e25f8f96c826c053e86b58bc9fe222bb8360f8d95159106c819a160985c4ec01aa860b381962a5a52df6b9f201
Sha512
8541933f157f7a1d261f5ab6ce48ad7c91358eb05d6ad63404eb7d2ac9a2247d9cc7aeebada147d1013318893450a1f3822e36d04c7974dd30ced25c6d994253
SSDeep
12:5jIR9L57KdruYuPegiDW/IllJmqU7f6kgLP5MWG2e22KaX1oONn8n1jQek2GRaYp:9Ir57KEYLpmqUzW5Gi2KaloONn813Gpn
TLSH
1E011206B7098FAFC017E8F8171B779412E517F1036B9282A435D73C65E0610EB07E1E
3 malicious · 3 files
ZIPd4196b9e9d19fbfcd01ffc2d5d4c90a0T1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKDOC-QPKW36.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
arc:zip>lnk~T1059.003~T1202~T1204.002
Shape
arc:zip>lnk
malicious
2 nodes
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential