Malicious
Malicious

ecf662ccf4b6328746c263425a817e75

ZIP Archive
MD5: ecf662ccf4b6328746c263425a817e75
Size: 577 B
application/zip
Ctrl + scroll to zoom · drag to pan

This sample is a 577 bytes ZIP Archive classified as malicious by Malva.RE (lolbin). Static analysis extracted 2 embedded or derived files. It matches 1 YARA rule. Observed behaviours map to MITRE ATT&CK T1059.003, T1202: INDIRECT COMMAND EXECUTION and T1204.002. The file was analysed statically: it was parsed and decompiled, never executed.

SHA256
69bbfc30b626e6b02b867238915be0458ba8383286281a858fe95fc1aea86539
MD5
ecf662ccf4b6328746c263425a817e75
Verdict
Malicious
File type
ZIP Archive · 577 bytes
Category
LOLBin

Cite this report: https://app.malva.re/sha256/69bbfc30b626e6b02b867238915be0458ba8383286281a858fe95fc1aea86539

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential

File
Type
ZIP archive
Size
577 B · 577 B
First seen
2026-08-03 13:04 · 2 months ago
Last seen
2026-08-03 13:04 · 2 months ago
Last analysis
2026-08-03 13:04 · 2 months ago
Hashes
MD5 ecf662ccf4b6328746c263425a817e75 Sha1 42dc9bd896484e59f8a9947e095c9ce75a843920 Sha256 69bbfc30b626e6b02b867238915be0458ba8383286281a858fe95fc1aea86539 Sha384 050ee7b4b944e19782e3376a50a674ce509b9cc631ce39d028f6ec77745c4f8a168c7877ca09f1ab91ad4350c3b0a570 Sha512 f0866a6375809441a344c0ee54d0dd77338898402dcd07af52841313b225cfb66f5f520f96941a4d27dec2dfb96929a04d932bfd76d2f264b424d0b392ea4800 SSDeep 12:5jjFySfwNqAXaAhJThlFY9tWOCj3ZKhjeg6ojDDXrjeXlpboITpFtiaov:9JydNqSh4a6jeg6EDeXlloAjMv TLSH 7CF020BE4F4DDD00E0A18074352A76E085E556C20AF28EBB687AC23E251DAA1A540042

3 malicious · 3 files
ZIPecf662ccf4b6328746c263425a817e75LOLBin
LNKDOC-JZFBAW.lnkLOLBin
BIN[Lnk Summary]
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
Path arc:zip>lnk~T1059.003~T1202~T1204.002
Shape arc:zip>lnk
malicious 2 nodes

LNK: Command Execution UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential

3 malicious · 3 files
ZIPecf662ccf4b6328746c263425a817e75LOLBin
LNKDOC-JZFBAW.lnkLOLBin
BIN[Lnk Summary]
No malware configuration was found at this point.

LNK: Command Execution UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
ecf662ccf4b6328746c263425a817e75 › DOC-JZFBAW.lnk
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential
Sign in or create a free account to view the matching YARA rules. Create a free account
An error has occurred. This application may no longer respond until reloaded. Reload 🗙