Malicious
f1bf35cbcbc0da268230a17e5023c29d
ZIP Archive
MD5: f1bf35cbcbc0da268230a17e5023c29d
Size: 579 B
application/zip
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
ZIP archive
Size
579 B · 579 B
First seen
2026-08-03 10:35 · 2 months ago
Last seen
2026-08-03 10:35 · 2 months ago
Last analysis
2026-08-03 10:35 · 2 months ago
Hashes
MD5
f1bf35cbcbc0da268230a17e5023c29d
Sha1
3610126e0bb0a2875e23d5a85e94ddac6bb1d472
Sha256
7c308bf221a2bb6b041f179e2467ebf467262f212420cc60dd6bb9739d0b4d56
Sha384
4ee191c3b7d393651dfff65ea64d85cc13ed4071cfab603a8eff3939c02227af49eb61a5bcb515a78f611e9db3b32f95
Sha512
f9894bc8233627ad62e1c84ddb7d2b9bbb41507f140aca5db078b6cd6f079f373aa2093af605134d88c5931fd7ad20d5ba590187783e768767351074e480ab84
SSDeep
12:5jVKDuqZcnVNMRHXH03KW1oEIG7Pi8f0B8nxG43s7CPaoF/:9USqZcnVWp+foE7d8BAngwN
TLSH
CEF026F58279E607E14577B2318F18B55F4271B4071D755D454DBC4CD7D40753B28C20
3 malicious · 3 files
ZIPf1bf35cbcbc0da268230a17e5023c29dT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKDOC-9ECIJH.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
arc:zip>lnk~T1059.003~T1202~T1204.002
Shape
arc:zip>lnk
malicious
2 nodes
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential3 malicious · 3 files
ZIPf1bf35cbcbc0da268230a17e5023c29dT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKDOC-9ECIJH.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
No malware configuration was found at this point.
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
f1bf35cbcbc0da268230a17e5023c29d › DOC-9ECIJH.lnk
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with EssentialSign in or create a free account to view the matching YARA rules.
Create a free account