Malicious
ZIP Archive
MD5: d520581d6db71ea8c7019a9ac9b4b7f5
Size: 587 B
application/zip
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
ZIP archive
Size
587 B · 587 B
First seen
2026-08-03 10:58 · 2 months ago
Last seen
2026-08-03 10:58 · 2 months ago
Last analysis
2026-08-03 10:58 · 2 months ago
Hashes
MD5
d520581d6db71ea8c7019a9ac9b4b7f5
Sha1
fbe82cec7e0a37ce3f2a53c7a960cfab14cd38f8
Sha256
b6471bc3ed2d41b792b92ee240e469a019d8b31d268df9cb7eb13a0636c75f1d
Sha384
d24a6a5bb2de26f82c6b38d2174f0968ce45fc62a0e816fa124bdea20378d924eb1d3ab2dc3f2160a13784d0a94e56c5
Sha512
d9be0775f5886372f9fcd6dea329e2ed71de9b97b2f390346636d775682ce6fd485c688393cc6f2073b588292242de56fc8965ce6062cd8c5a191064d884658e
SSDeep
12:5jyfOv9L1gZRjLCqGOFsrHI/lAgbUxQaol:9KO4RjeOFsrHIzU+l
TLSH
DBF0E154D6591267D641707A01306D577117079C0C4A1F9B6975987A18F2FD59FC806C
3 malicious · 3 files
ZIPd520581d6db71ea8c7019a9ac9b4b7f5T1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKDOC-XD086H.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
arc:zip>lnk~T1059.003~T1202~T1204.002
Shape
arc:zip>lnk
malicious
2 nodes
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential