Malicious
ZIP Archive
MD5: f0cb2f5bafa1ebbaac9690d3831ca563
Size: 876 B
application/zip
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
ZIP archive
Size
876 B · 876 B
First seen
2026-08-03 10:51 · 2 months ago
Last seen
2026-08-03 10:51 · 2 months ago
Last analysis
2026-08-03 10:51 · 2 months ago
Hashes
MD5
f0cb2f5bafa1ebbaac9690d3831ca563
Sha1
a99c29c9ab53a4c7130bc2d937156a6cdb5d26dd
Sha256
0765ccae62cf03e33b1b420f937173d00aa93f55a810e339cc82098c59f4cda5
Sha384
7697a6c17845169734e5326b561075eb0644e1833042344261f974f41b5b6470d14ba7f2122965e7acb7cded495c326c
Sha512
0fc5fd5c91cf54e4bc3c413c985951b90634e2a1e18d1f0d0d6d7b39cd532e04a73fb3b5b8447c711c634bbc65ef21613dd67890f3e28edf7fe925405b323bd7
SSDeep
12:5jFrlJi/eDUa3x034njl9dJU3TibCLHWEXPpa46+EgXO14rSZtUCBDkaoO:9RlJ7+rj+s2gRaYO14eZzBEO
TLSH
6311E68A736B4221C253ACFB03A82556EEC40B3546A38CE82560D8C32C60AAD0BF42C4
3 malicious · 3 files
ZIPf0cb2f5bafa1ebbaac9690d3831ca563T1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKDOC-QJN7W7.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
arc:zip>lnk~T1059.003~T1202~T1204.002
Shape
arc:zip>lnk
malicious
2 nodes
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential