Malicious
ZIP Archive
MD5: d586c86b43bc48fc35429651cd5af5cf
Size: 589 B
application/zip
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
ZIP archive
Size
589 B · 589 B
First seen
2026-08-03 10:59 · 2 months ago
Last seen
2026-08-03 10:59 · 2 months ago
Last analysis
2026-08-03 10:59 · 2 months ago
Hashes
MD5
d586c86b43bc48fc35429651cd5af5cf
Sha1
38a3e9dc0efd527c80708078dbf0c030e8eb2726
Sha256
ec73047236673d21b09357af6c63df5ca57de2afbb9da49e788512be575ada3b
Sha384
8d173a38897ef577883f46edbdd82990b5c5439f3064bd6de33ab6d4d056fc2e0e374ded2a8e03ac4e79a241e5b29c1c
Sha512
92e4b33a2c792e7ffbc17638e1a6ebf16e2affeab3dcb988d05b9496d85d0cabc548a0738ddf6de85517809b5e2e20118bb2f83841ed764b08559ea020bf3158
SSDeep
12:5jYuAIxUBSY28ZyZgeBKsklDwfHiqqNaiWiaor:9PFcrSZXKtZwfHiqqEGr
TLSH
CCF02093A186C4CAC8EEC07D86B27F864F88E4C18D052F2735A4FE234EA10C36958471
3 malicious · 3 files
ZIPd586c86b43bc48fc35429651cd5af5cfT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKDOC-2XIS73.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
arc:zip>lnk~T1059.003~T1202~T1204.002
Shape
arc:zip>lnk
malicious
2 nodes
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential