Malicious
ZIP Archive
MD5: da78ab379797a2102eab089be31ddac4
Size: 591 B
application/zip
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
ZIP archive
Size
591 B · 591 B
First seen
2026-08-04 08:37 · 2 months ago
Last seen
2026-08-04 08:37 · 2 months ago
Last analysis
2026-08-04 08:37 · 2 months ago
Hashes
MD5
da78ab379797a2102eab089be31ddac4
Sha1
6a1910b1bd7472ae57e88d66a72b854261b2a473
Sha256
aac333928c5a9c5bb4e52d92fbb82be017ad919a4dfb6069038d650f8a69b70e
Sha384
b4613969f974e9b371a3aa8c934e3db70ddb244d97e51d633405b3cd3d6c2e0694de8b1e83b50db6665545d2460a11df
Sha512
ff604c7a5a5704ca2ea7fa74c631b57a93e289ad70b3c044111e13ea29eb5203164ce3b85b989f3595794edb5ecc9aead67cbb214d1437eddb937792fcb2dfd9
SSDeep
12:5jEKShQ0OzPQCxA2Cj76v9HmH4UMVNT5vsij8spUKe9gMBBi/Paox/:9RSxePQ/37i9HPV1Vxj8spUr9rBuRx/
TLSH
1DF0E1B587060228E57651F0F22A3B14DA5C6089316E2CC9B3BAA576C9283CD434F126
3 malicious · 3 files
ZIPda78ab379797a2102eab089be31ddac4T1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKDOC-7EVS2V.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
arc:zip>lnk~T1059.003~T1202~T1204.002
Shape
arc:zip>lnk
malicious
2 nodes
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential