Malicious
e411a8ea34ed88250c3993e5f9e40aee
ZIP Archive
MD5: e411a8ea34ed88250c3993e5f9e40aee
Size: 590 B
application/zip
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
ZIP archive
Size
590 B · 590 B
First seen
2026-08-03 12:07 · 2 months ago
Last seen
2026-08-03 12:07 · 2 months ago
Last analysis
2026-08-03 12:07 · 2 months ago
Hashes
MD5
e411a8ea34ed88250c3993e5f9e40aee
Sha1
8ec8bb63cb5c10913bed39de0230dbf44f6b2ffc
Sha256
ce52f3f4b74c12a001233e151f76b5adfc46bdaf77fa537d94d462464fd57f64
Sha384
7da3b55c87f4e4824c29121ac7a1c1e95a544e4aece550ee37b6b72cd34f93cda090b2afdd3563298f018c15a9da280d
Sha512
f23094d38484cbfb5b794090b6fce9b8f46f987735c2186e3987ce7176928e29b0c7dc2dbabf86c3d8e85674a94871621bc8dbcb4a129fbda67624311525856a
SSDeep
12:5jAtcG8n/QDflLPA5UbX0MAGqgC1VWtn94pVJT6IT/yW5jkMrG4uTmbOtcG8scaH:9AtcGvBLTkT8tn6peTWZtCpTmbOtcGb
TLSH
BBF026821567C084DD13E8361D7A2EA38E715DD59776FE835F60794008417EF2D57145
3 malicious · 3 files
ZIPe411a8ea34ed88250c3993e5f9e40aeeT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKPDFDOC-P07N04.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
arc:zip>lnk~T1059.003~T1202~T1204.002
Shape
arc:zip>lnk
malicious
2 nodes
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential3 malicious · 3 files
ZIPe411a8ea34ed88250c3993e5f9e40aeeT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKPDFDOC-P07N04.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
No malware configuration was found at this point.
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
e411a8ea34ed88250c3993e5f9e40aee › PDFDOC-P07N04.lnk
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with EssentialSign in or create a free account to view the matching YARA rules.
Create a free account