Malicious
ZIP Archive
MD5: da6aa2d36c2020ce7934395178eb65e8
Size: 850 B
application/zip
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
ZIP archive
Size
850 B · 850 B
First seen
2026-08-04 08:20 · 2 months ago
Last seen
2026-08-04 08:20 · 2 months ago
Last analysis
2026-08-04 08:21 · 2 months ago
Hashes
MD5
da6aa2d36c2020ce7934395178eb65e8
Sha1
4a23c72ba38f1fbee06b8702afd7163546c03a4e
Sha256
79486cf13a76e65c8bfa06006c114785ded22ec380fa4036abbef533d3bcd65f
Sha384
35bc05f594293cb2434de172a889bf88ad0156cf80396f4209fcb8d01df826560b1568a2be3a73cb23707f67f469adb1
Sha512
ac74557c99f9a7302a5142cae618a2ac00c13158ee340574ab48915193d65bf55985fc4fb6a248d04a9d147137355b76518e6cbc51e731c20ec296126b4edbe6
SSDeep
24:9kGq3Ej+qVr/DXlUl0zH7S6ZhHP8apx+7gBMyGV68:9IESkzxUle7/ZRVnMu8
TLSH
C50186519196B546FF5117BD46F9D22D5067118A04C22974720ACCA809E65447D17CAC
3 malicious · 3 files
ZIPda6aa2d36c2020ce7934395178eb65e8T1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKDOC-NMCA6W.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
arc:zip>lnk~T1059.003~T1202~T1204.002
Shape
arc:zip>lnk
malicious
2 nodes
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential