Malicious
ZIP Archive
MD5: d9a302ab1ed0803653ae97d2cdbaeb6e
Size: 591 B
application/zip
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
ZIP archive
Size
591 B · 591 B
First seen
2026-08-03 11:02 · 2 months ago
Last seen
2026-08-03 11:02 · 2 months ago
Last analysis
2026-08-03 11:02 · 2 months ago
Hashes
MD5
d9a302ab1ed0803653ae97d2cdbaeb6e
Sha1
f6285551f0e2b68dc6f11911be5c26f3c3fa9507
Sha256
b88c299f68a83807b7c4be22c130a3b79984b866d3176b0ba242e152917f0ddd
Sha384
02336768e5ed9b764f6bac572597f21a1f9bd880c2fc9887ef3b5528eeb22a8493ef70ea336facfc6de1097151caab06
Sha512
e15f02276f180e11a20feee15416e23443023de24c59f8e793bea1d789e98d48686f004c4767f8cbdc526c23f0685ed3b54dc0e61feaa185fd0e5edb6050ad94
SSDeep
12:5jMeO+uKpqANCJ8GVXLmTwVrI8DiETD66lm7kV76Jaox/:9zplNCJ8GVXjrISFDN5F6Xx/
TLSH
FFF0E1BE5043A40FE327F4F4FD1C52DCDC754308057AA1051E5EF4064811AE9885D0C0
3 malicious · 3 files
ZIPd9a302ab1ed0803653ae97d2cdbaeb6eT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKDOC-8BQZR2.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
arc:zip>lnk~T1059.003~T1202~T1204.002
Shape
arc:zip>lnk
malicious
2 nodes
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential