Malicious
ZIP Archive
MD5: e25d08e64e22b30615a179304368737a
Size: 896 B
application/zip
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
ZIP archive
Size
896 B · 896 B
First seen
2026-08-04 08:21 · 2 months ago
Last seen
2026-08-04 08:21 · 2 months ago
Last analysis
2026-08-04 08:21 · 2 months ago
Hashes
MD5
e25d08e64e22b30615a179304368737a
Sha1
dd3f808185e71b82da38ac187149b8c5fa391d61
Sha256
9e88d4f00853c4a11639d7c40e276441559ec90ac447f02f5fd12513ef387d16
Sha384
188c4f7b196fa30543754387f4938fc8888b9aa65e7cc83209ba73830efeb1b172f81526a58afe574af6060311da1169
Sha512
f4713271853edce5f46893c0bd672778023b9c0c9540bd610294e485b0c4f3b821252139ca6212eadba27dcae349e0d665c306a96f48adb5d946074b4b8a51fc
SSDeep
24:9Ic5o3GQMR25EQwwr78INgWgduIHZLg7R7hmbcN1UGl:9IFwR255rQduIa7phD1Uy
TLSH
0511632AEBBDA518CA9626B890E920E4F8584283461517AA46F1BC45DC2A98F8F424F1
3 malicious · 3 files
ZIPe25d08e64e22b30615a179304368737aT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKDOC-9NX1IJ.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
arc:zip>lnk~T1059.003~T1202~T1204.002
Shape
arc:zip>lnk
malicious
2 nodes
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential