Malicious
f098dc5e1d3b59669eb1eac0dc526afa
ZIP Archive
MD5: f098dc5e1d3b59669eb1eac0dc526afa
Size: 594 B
application/zip
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
ZIP archive
Size
594 B · 594 B
First seen
2026-08-03 08:52 · 2 months ago
Last seen
2026-08-03 08:52 · 2 months ago
Last analysis
2026-08-03 08:52 · 2 months ago
Hashes
MD5
f098dc5e1d3b59669eb1eac0dc526afa
Sha1
ba3695a92c5de7513b6451afef54ac080b8122b3
Sha256
c2ddfdd1bbb042f36480c3c753741cf1ceb3b6b5e8073de3f3217ea08f56345d
Sha384
1d057b3cedb8d8f020c408ff8f1dcd2b76f48a6c7b96bdbd0e31a27c0b2d178a721bdc1d01dee26bae05a47d8476ae2f
Sha512
9f329acdd11d84d9bda3e0483b8aeecb6aacdaebe5f9952ceadeeec599247f3c5cb577ea55f81adcabef23288e45e68a41c9e6f53c2248a0cb066da7120bbdb7
SSDeep
12:5jTWmyYbJxM3b6NK18g27biWcQ5R1/Zt8n+B1RWII1Jab:9uqxMLl1QbVR1BG+B1P
TLSH
3CF0414B6682A08DC2318EB115C6BFA454823E8A929217070279CBB7C82B0650E66491
3 malicious · 3 files
ZIPf098dc5e1d3b59669eb1eac0dc526afaT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKVoucher_-849V4Z.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
arc:zip>lnk~T1059.003~T1202~T1204.002
Shape
arc:zip>lnk
malicious
2 nodes
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential3 malicious · 3 files
ZIPf098dc5e1d3b59669eb1eac0dc526afaT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKVoucher_-849V4Z.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
No malware configuration was found at this point.
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
f098dc5e1d3b59669eb1eac0dc526afa › Voucher_-849V4Z.lnk
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with EssentialSign in or create a free account to view the matching YARA rules.
Create a free account