Malicious
da6af2210281d286bf06f646f59f28aa
ZIP Archive
MD5: da6af2210281d286bf06f646f59f28aa
Size: 600 B
application/zip
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
ZIP archive
Size
600 B · 600 B
First seen
2026-08-03 12:36 · 2 months ago
Last seen
2026-08-03 12:36 · 2 months ago
Last analysis
2026-08-03 12:36 · 2 months ago
Hashes
MD5
da6af2210281d286bf06f646f59f28aa
Sha1
1f665ca5f8647c63cc228f10d26ac29d59bce94d
Sha256
3e1ca48ce62617629eea32beea20ed7f2cec4fb294d629d770c7ab96ce012e73
Sha384
d55420637393f8739deb21c63c382f52cee7554e9073b609fabc7ff8e7e401f232a08a25a3ff186eeb485d7d6dd99981
Sha512
6e9b816cdb0a4bc63635be32435251273ad02c6578b3b18eca33930bf8f84bf9675ca1b9ea669916138ab71bc813f4f4b96a5fb6b36eae48943a27a35717db91
SSDeep
12:5j2lceQFjyLhNi6KIELrr11pwQw80rFcNN4CBs+Cu98eg29uLfjbBAlcMFYaL:9216jihNnQrJEQCcN4CW89ZHgLfjbBAf
TLSH
A8F041993628E6CBCC0A31357313321484CD49C7826B2F4F20A80C28E86E26778A2C90
3 malicious · 3 files
ZIPda6af2210281d286bf06f646f59f28aaT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKXml_Fiscal_-8LN9O6.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
arc:zip>lnk~T1059.003~T1202~T1204.002
Shape
arc:zip>lnk
malicious
2 nodes
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential3 malicious · 3 files
ZIPda6af2210281d286bf06f646f59f28aaT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKXml_Fiscal_-8LN9O6.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
No malware configuration was found at this point.
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
da6af2210281d286bf06f646f59f28aa › Xml_Fiscal_-8LN9O6.lnk
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with EssentialSign in or create a free account to view the matching YARA rules.
Create a free account