Malicious
ZIP Archive
MD5: d52a9edaddcfa8ccc9861f172d666d6c
Size: 931 B
application/zip
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
ZIP archive
Size
931 B · 931 B
First seen
2026-08-04 08:03 · 2 months ago
Last seen
2026-08-04 08:03 · 2 months ago
Last analysis
2026-08-04 08:03 · 2 months ago
Hashes
MD5
d52a9edaddcfa8ccc9861f172d666d6c
Sha1
f9829ffc71264cd2f85088c391a20f859f3a1f50
Sha256
97a1cc73c488fc7e8e466e3d72491b77bad858c54675301559d263fc3416cd72
Sha384
8edc3f8d3f7db6f3ac7a7bf0e1a0f1c831f2b6027f6dab6a27b29610d8a0a7ee8dbaa697432f24f4abee8e6b2fd38475
Sha512
2c303c89c3f4fcc007006274cd302ef0fa81e5effb899029196c3d6ed071f6a94a5f3b6c4b18c373033c14fbe824c4e5a4d962e5151453cd13ed43c4355bc1e8
SSDeep
24:9TzrSz0OmjM7Zv4ux2iiCe17csCmSuIGLCz+t7XP:9rU/mI9vLONCm84XP
TLSH
FD11C4823B3D047DE594D8B1A034634EA27130E1101DB414273AE16BF8EF2E44C58AE8
3 malicious · 3 files
ZIPd52a9edaddcfa8ccc9861f172d666d6cT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKDOC-YE6TIL.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
arc:zip>lnk~T1059.003~T1202~T1204.002
Shape
arc:zip>lnk
malicious
2 nodes
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential