Malicious
d54a7cf83d50f648df07a7c845853ebf
ZIP Archive
MD5: d54a7cf83d50f648df07a7c845853ebf
Size: 926 B
application/zip
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
ZIP archive
Size
926 B · 926 B
First seen
2026-08-03 13:26 · 2 months ago
Last seen
2026-08-03 13:26 · 2 months ago
Last analysis
2026-08-03 13:26 · 2 months ago
Hashes
MD5
d54a7cf83d50f648df07a7c845853ebf
Sha1
133ff69c104adf58d9959a08c0f56d68a01df32f
Sha256
c8ddb1b7c9252556a9cd0a7d5fb06abdbd208d9b98a2b1d3184d49a6e91a4493
Sha384
ec1e8dc253cae62ecf0b102eb152db55e565f616a02c0ad6d73b8decb9abc3238ebaf4d4ca9c871ba8368faec4272b3e
Sha512
6933b7f9e6409ae9de257ab000cda10787e5cee68dd34c7df0dbe94c251a0ca61108a0937141cec8ab81a5236554a1ef92ec11a0d8929d8f5318ee8d6d981ce1
SSDeep
24:9YpX3UjF6ZDEo9ukK4ev+1+PGgFaR1PriC8Ac4V7XzSn8kMBKLYl:9I3qEQkKYKVy8oV7zS4B0Yl
TLSH
AE114436B47ADEE9CE7CD4FDE6855B986110552240C629824AC9805C361029559F3BFB
3 malicious · 3 files
ZIPd54a7cf83d50f648df07a7c845853ebfT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKDOC-T2AVG4.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
arc:zip>lnk~T1059.003~T1202~T1204.002
Shape
arc:zip>lnk
malicious
2 nodes
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential3 malicious · 3 files
ZIPd54a7cf83d50f648df07a7c845853ebfT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKDOC-T2AVG4.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
No malware configuration was found at this point.
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
d54a7cf83d50f648df07a7c845853ebf › DOC-T2AVG4.lnk
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with EssentialSign in or create a free account to view the matching YARA rules.
Create a free account