Malicious
d49436ac655fb93f01996fea63a30562
ZIP Archive
MD5: d49436ac655fb93f01996fea63a30562
Size: 964 B
application/zip
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
ZIP archive
Size
964 B · 964 B
First seen
2026-08-04 08:01 · 2 months ago
Last seen
2026-08-04 08:01 · 2 months ago
Last analysis
2026-08-04 08:01 · 2 months ago
Hashes
MD5
d49436ac655fb93f01996fea63a30562
Sha1
e8f80c9167af9c49490532cacbb3e3cc5952595e
Sha256
717594ffa0822baff656b4d8d068746ab2827e8dca6ef4091361e0da0cdda953
Sha384
d85f963c7936a2717cb4a53f9af8d07c7a936bf472648c7d02f6556b87e73525450d6aba29d1bfa16dfd2e1076ee2da6
Sha512
56ce831bd9e9a192e0c4e337a514001d79908a2e5cd2ca0ab4a141836a64cc6287f9d738e5a91e47f727168989dcc4aef648fb23ae986c3e26b4b840622f768e
SSDeep
24:9wM9RnRL5Q7omLxb5myodN8VffVouSQehM10MWAW:9H7GLxxqNYiuSQeeHxW
TLSH
1611C836ED150F15D19EC3BD4CF333091C95806DCA4AFE92B223A8C815A9655BA3772B
3 malicious · 3 files
ZIPd49436ac655fb93f01996fea63a30562T1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKDOC-Q9Y7GJ.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
arc:zip>lnk~T1059.003~T1202~T1204.002
Shape
arc:zip>lnk
malicious
2 nodes
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential3 malicious · 3 files
ZIPd49436ac655fb93f01996fea63a30562T1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKDOC-Q9Y7GJ.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
No malware configuration was found at this point.
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
d49436ac655fb93f01996fea63a30562 › DOC-Q9Y7GJ.lnk
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with EssentialSign in or create a free account to view the matching YARA rules.
Create a free account