Malicious
ZIP Archive
MD5: da4ca5eaa9c390df317b0abe9838a532
Size: 589 B
application/zip
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
ZIP archive
Size
589 B · 589 B
First seen
2026-08-03 11:28 · 2 months ago
Last seen
2026-08-03 11:28 · 2 months ago
Last analysis
2026-08-03 11:28 · 2 months ago
Hashes
MD5
da4ca5eaa9c390df317b0abe9838a532
Sha1
fff586a78c96f0ab20b97c24557e44688f2f3b94
Sha256
ec5c516fbd8518af438c6d106297e3496be834266b5b1ca708073ab78af4b1be
Sha384
741f40b4ba8ef0d472f91aacd69e4da76b6203ba1de0946baa93d4a6e7f739794b7712eec581671f7e3f3e58cbd1b6b7
Sha512
9eafb41629fe5b2b7ae5f400612566e8e974ba613482ad226e8d2f9d44a63d1491f8ca7c320c7d45ff2af64f81b936544e762b8a03dd4978d6d4ee002e8aa760
SSDeep
12:5j7ALdQUaW+c85Y2knsRtQgvNzMt5SeFRAkCJaor:9MmUaWiYfSJvmZ6xXr
TLSH
8CF0417301697204C273053BC963496BAB1A422A65492BD81999C8685AFC822B98AD94
3 malicious · 3 files
ZIPda4ca5eaa9c390df317b0abe9838a532T1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKDOC-D34G5H.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
arc:zip>lnk~T1059.003~T1202~T1204.002
Shape
arc:zip>lnk
malicious
2 nodes
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential