Malicious
ZIP Archive
MD5: d70ab530479e4e4a5fc431c2af4c9583
Size: 588 B
application/zip
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
ZIP archive
Size
588 B · 588 B
First seen
2026-08-04 08:33 · 2 months ago
Last seen
2026-08-04 08:33 · 2 months ago
Last analysis
2026-08-04 08:33 · 2 months ago
Hashes
MD5
d70ab530479e4e4a5fc431c2af4c9583
Sha1
baa84261d6f575d571dcf3c158907121cae90d32
Sha256
fd5bf9ef303e78bb90d98b6a77fbb65ebbe5f3e69969eb2e33c01b5bedf7e691
Sha384
26e6276fdccf8aa3b90932c1f613aa1a5a4b538e9810af18cecabaa4aac4c2ab89c395b2b6705bfc0e0691192336186e
Sha512
c952aaef10462b5c758f0f3516e9e619cf079385c2db561aad72071530bbb44007700265f17b5ca407b42a933bccb08b0cb7635d88692727f1f9f07c362873a3
SSDeep
12:5jXAKlNE9ZEbUH356dMQyW91p2w+NYvoDha0SdxJv7NAKl5iaoM:9XAANYf5XQyYuqoDA0szNAA5CM
TLSH
77F0E1124151294AE5B6B0BB95D4277A84C1809A122CAF622896E95F1ACD096DF8A9B0
3 malicious · 3 files
ZIPd70ab530479e4e4a5fc431c2af4c9583T1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKDOC-RDJ5HI.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
arc:zip>lnk~T1059.003~T1202~T1204.002
Shape
arc:zip>lnk
malicious
2 nodes
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential