Malicious
ZIP Archive
MD5: f2e243291c6bb7237ddb56631a1012cb
Size: 596 B
application/zip
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
ZIP archive
Size
596 B · 596 B
First seen
2026-08-03 13:23 · 2 months ago
Last seen
2026-08-03 13:23 · 2 months ago
Last analysis
2026-08-03 13:23 · 2 months ago
Hashes
MD5
f2e243291c6bb7237ddb56631a1012cb
Sha1
8f72dbf37eded752fb351e36b20e2c52dede3fde
Sha256
da1fa616c9c00c18c6444dcab1160214d4c3f8afc73b280e2b382bf91035bc49
Sha384
4dfc0454a0edb0d0311bfdf05ce2ca37a24f4500a0d24aaeaec461d03c7874ba98eb105d6a5668f696f1d03c38e53285
Sha512
ea35f865032f836d6c649b1a8c3cbb582063c5ef2597d08cdf747ff4be292f00e493e8d8873743f905342138f265dd1d19be7669b684337b387a6c627782d06b
SSDeep
12:5jtWuweQGukwNSUR6rqEtTaQ60Xq8kNSqS3P9rJ9ocrWutVjaN:9tApjk4STrxtBRaS3PD9LrXY
TLSH
7CF0E144852EE4AAC2979EB454CFF21E5981BAD02826277D772061E2D88FD938F11296
3 malicious · 3 files
ZIPf2e243291c6bb7237ddb56631a1012cbT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKNotaf_-KMOT7J.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
arc:zip>lnk~T1059.003~T1202~T1204.002
Shape
arc:zip>lnk
malicious
2 nodes
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential