Malicious
e4215ebee98537a469f13c3f087d7ba4
ZIP Archive
MD5: e4215ebee98537a469f13c3f087d7ba4
Size: 625 B
application/zip
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
ZIP archive
Size
625 B · 625 B
First seen
2026-08-03 08:48 · 2 months ago
Last seen
2026-08-03 08:48 · 2 months ago
Last analysis
2026-08-03 08:48 · 2 months ago
Hashes
MD5
e4215ebee98537a469f13c3f087d7ba4
Sha1
edf3c0fb1d7ca42d3db16377d9e9545edc207767
Sha256
4c9881e8164d076a1dadc1f3c99c17900520c40559985ebbb461fe64e342bf82
Sha384
69c807e5c13480bfbe0d514d3b0381480b690967e2f633b69554726363f378d8ae8bcc09962c112bc77d89c64c39f9fa
Sha512
78632c847ec2a837f0635471b305fb0f1f09fecf8c722bbf7e85d734ac1d963f40ae2a5660c0e880f917b983630655beb5e2b0a8e226dcb567a7fd6d1849518b
SSDeep
12:5jNQ7yGn4LtSzq6jSyS7MG3KGFoO2JuVf9Q+RehGUUAIan0s4o/p3gVjGNZGBBTf:9NYyfLtOq6HS7MtGb2JYfyUrAr0Vo/5e
TLSH
39F0A2B5C9323001CA175FF39E05F0560EDCB0671348BDE769B363090859B516F6683C
3 malicious · 3 files
ZIPe4215ebee98537a469f13c3f087d7ba4T1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKALVESHOTEL_VOUCHER--Z7WYDJ.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
arc:zip>lnk~T1059.003~T1202~T1204.002
Shape
arc:zip>lnk
malicious
2 nodes
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential3 malicious · 3 files
ZIPe4215ebee98537a469f13c3f087d7ba4T1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKALVESHOTEL_VOUCHER--Z7WYDJ.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
No malware configuration was found at this point.
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
e4215ebee98537a469f13c3f087d7ba4 › ALVESHOTEL_VOUCHER--Z7WYDJ.lnk
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with EssentialSign in or create a free account to view the matching YARA rules.
Create a free account