Malicious
ZIP Archive
MD5: f2652dee2650ed99bcd1078d33e794b1
Size: 964 B
application/zip
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
ZIP archive
Size
964 B · 964 B
First seen
2026-08-04 08:08 · 2 months ago
Last seen
2026-08-04 08:08 · 2 months ago
Last analysis
2026-08-04 08:08 · 2 months ago
Hashes
MD5
f2652dee2650ed99bcd1078d33e794b1
Sha1
05ad53ffcfc1e1bd76807d83f05dc898065963d7
Sha256
3aec9b5276896ee75ff3f630ba6a64483aa0de76e7bb7675543739091f634f16
Sha384
821b3e1ef38d0a671ceb2e29137fc99e605026fda86ec6a1d73657a75c86af507564b6db2219a9ebb12574c1e87066ff
Sha512
2e2f3d6ed98c807a5cea81ad355010f5d63b0088040c51b155aa6140caea0b740e1e8b5a4b060e7147a565ec34fd828c4390ec5b6a978582e04fd79f075c683c
SSDeep
24:909sYho6RoCG+cEWVDPuMp+KNBzY/tFfyvJSrW:98s56Ru+cEWsM8axSqvJeW
TLSH
161188473F881900E9F1597154D3594D1EB12391448BFFC52873F7CA5E719A5E9C45F0
3 malicious · 3 files
ZIPf2652dee2650ed99bcd1078d33e794b1T1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKDOC-5Y5DAY.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
arc:zip>lnk~T1059.003~T1202~T1204.002
Shape
arc:zip>lnk
malicious
2 nodes
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential