Malicious
ZIP Archive
MD5: d81477a2608a7542820e59618998413b
Size: 583 B
application/zip
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
ZIP archive
Size
583 B · 583 B
First seen
2026-08-03 13:07 · 2 months ago
Last seen
2026-08-03 13:07 · 2 months ago
Last analysis
2026-08-03 13:07 · 2 months ago
Hashes
MD5
d81477a2608a7542820e59618998413b
Sha1
1725b5fe3a909462de6ad2f913ea41b400bf989c
Sha256
f220de20b2535e0de26e0572947964f962f8fea6fe091ad9cfd30d7f99955033
Sha384
b6f1fc65f5e9c49a7aaca1a2ba05976781622c75552ad7f3387561c6924321bffde2b39e400546cf9ec57301cf6c7646
Sha512
6f71a808539b444ffe594b98b55752b885902de664c22a336a0139c5731e74a1cdfe62e9be1d5f803053fc41fcee0045a0642db9123e81af65460daa61592853
SSDeep
12:5je9dx54DZpvKfE7BWRMV8UwGDNqOUbtQQ6ju7tPaoBn:9AwpykWRRULDNfqgjI3B
TLSH
66F096E20F7680B5C53CC4FC36D1537507501EA601272037300CC37F1B0B09E284C461
3 malicious · 3 files
ZIPd81477a2608a7542820e59618998413bT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKDOC-YZZD4G.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
arc:zip>lnk~T1059.003~T1202~T1204.002
Shape
arc:zip>lnk
malicious
2 nodes
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential