Malicious
ZIP Archive
MD5: f156e714dc134544838e54b3a75f0c54
Size: 585 B
application/zip
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
ZIP archive
Size
585 B · 585 B
First seen
2026-08-04 08:01 · 2 months ago
Last seen
2026-08-04 08:01 · 2 months ago
Last analysis
2026-08-04 08:01 · 2 months ago
Hashes
MD5
f156e714dc134544838e54b3a75f0c54
Sha1
b66202c08d2219125e94a45e4f950ac30740ca65
Sha256
5ce06f118907230351f50a1c508ba3a4591b1c1b1e542245fed6f6fa0601ee1d
Sha384
6d5b098ac783f827b810664c8ec43329bbf2c61716b393d545e37ff6fc9882def37e0297858d2c9150f24b3bfb994b97
Sha512
8d5784fd44d04586bf286fd879469135cfa7fb5aa9da77f7441af77768029451a551f470163662f8ab9b475126f03dfdf017e92f8b2e0f4dc83382cd1b6b19f0
SSDeep
12:5jkdHHOER79POU5Z76Mx9ByF3hqRTVC8gdAyjA/nG+DJaoH:9eHOE59POMBx98JoadO/nDXH
TLSH
16F041E78D9F0076C024EC74C1BB7A36C7D826E533A70B3A91C2C0901E7048B4E84920
3 malicious · 3 files
ZIPf156e714dc134544838e54b3a75f0c54T1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKDOC-CKYMTF.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
arc:zip>lnk~T1059.003~T1202~T1204.002
Shape
arc:zip>lnk
malicious
2 nodes
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential