Malicious
ZIP Archive
MD5: f1ddd3bff4852c8ab8d03732102bc8ae
Size: 589 B
application/zip
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
ZIP archive
Size
589 B · 589 B
First seen
2026-08-03 10:35 · 2 months ago
Last seen
2026-08-03 10:35 · 2 months ago
Last analysis
2026-08-03 10:35 · 2 months ago
Hashes
MD5
f1ddd3bff4852c8ab8d03732102bc8ae
Sha1
fd1fa6530e5842829f9f002cfc9d95fbc047a667
Sha256
ef61f4ede75d6e5c08d1a1cb031c7e5f1af6c520e020237cb05f5018058d5698
Sha384
de7fe5abf422253478fa23d8f6f88a2f4ad47cf404410be22373906ffcabd42b631577b0364833cdaa2df371c05ba3df
Sha512
5af566ff811bb9947cbc4e763d4a776b494eef5dd1235d4b942a772e923e420c9b2c0692c7954834508925a14cf865547bd7351f96d8befe871c7ec470ae1f95
SSDeep
12:5j4M4Lpym2A6UPN0Q3HmgwV8YIz7At6/e4Waor:94M4LHF6UF02mgwIz7Zmr
TLSH
FFF0414980B2001AD01400B5DB4279BBCAABD813C4A90A7B0FDBDCCD4B2D2544D44D58
3 malicious · 3 files
ZIPf1ddd3bff4852c8ab8d03732102bc8aeT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKDOC-81L5H4.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
arc:zip>lnk~T1059.003~T1202~T1204.002
Shape
arc:zip>lnk
malicious
2 nodes
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential