Malicious
ZIP Archive
MD5: dfa9f999608495174401a39f6b46f67b
Size: 584 B
application/zip
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
ZIP archive
Size
584 B · 584 B
First seen
2026-08-03 13:40 · 2 months ago
Last seen
2026-08-03 13:40 · 2 months ago
Last analysis
2026-08-03 13:40 · 2 months ago
Hashes
MD5
dfa9f999608495174401a39f6b46f67b
Sha1
2c13a53a7c85c09eb628bb6db6be481147b679b2
Sha256
a2346edac5bc7bd88817fa96df081c6b78a94221c6e5177e6cbaf4574f2d3863
Sha384
c9605ee14944c371fc7e496bad3e33eb6e6be76bd39ee74f24408b592dbcc8240e45308443a2a0485ff9b6ff40186d02
Sha512
2798edb623246df0cefbfa23df9b96b361d1aa31b550ee0d0b353902c9fe263bed8e8224e74ea696ebb43cb60d5544a280029ae8096ae75cbd917425e82a4160
SSDeep
12:5jjG08uvJeckihK4nXegAoz6+HKwr+5Kcxl8duDluWjr2Q5KTLkToeNG08uaoo:9jLjJNkihjnup+HOKcxl8QDlukrZQLQk
TLSH
33F0E1E2C27A0325C81241F6496B22E70BB00489167E6D3C6C60F1A79A0155A5F2FADC
3 malicious · 3 files
ZIPdfa9f999608495174401a39f6b46f67bT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKDOC-LTZ6K9.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
arc:zip>lnk~T1059.003~T1202~T1204.002
Shape
arc:zip>lnk
malicious
2 nodes
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential