Malicious
ZIP Archive
MD5: df41e4d407c3c48b4d7f835a5126e617
Size: 839 B
application/zip
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
ZIP archive
Size
839 B · 839 B
First seen
2026-08-04 07:46 · 2 months ago
Last seen
2026-08-04 07:46 · 2 months ago
Last analysis
2026-08-04 07:46 · 2 months ago
Hashes
MD5
df41e4d407c3c48b4d7f835a5126e617
Sha1
99e55a1a8ee3f313e4f5618c9f7269a583dd45ad
Sha256
bc591fbb2adf3c9f5c3674f955dd4eced75e686619b275f747780e9a57db991d
Sha384
e88610f08d9b970eb77986b3f4a1a6b421fb2c92938358b1dffae1e97c25fef64e67a7844ae28796c97ba1d06790a3af
Sha512
ee52396e113f712c39d1c18b4bb90bd08633d22da43fa89f31edc70c65a15cb35ee7894c8b663243d61960d063f88e152747006fad08ca02b74993744603588f
SSDeep
24:9JXXzR8M0kT9wYGyxXqn2agVj3IIdpYLMEwJNeS:9JHzR8M0kBwtDcIIvtneS
TLSH
3601527E87ED2053D105A9BE68631FCEEA7C703A801B661925A384AE08E5345D347D00
3 malicious · 3 files
ZIPdf41e4d407c3c48b4d7f835a5126e617T1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKDOC-8O3QQ5.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
arc:zip>lnk~T1059.003~T1202~T1204.002
Shape
arc:zip>lnk
malicious
2 nodes
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential