Malicious
f4880ab9d41e33a51648809f5e4cf0bf
ZIP Archive
MD5: f4880ab9d41e33a51648809f5e4cf0bf
Size: 944 B
application/zip
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
ZIP archive
Size
944 B · 944 B
First seen
2026-08-04 08:03 · 2 months ago
Last seen
2026-08-04 08:03 · 2 months ago
Last analysis
2026-08-04 08:03 · 2 months ago
Hashes
MD5
f4880ab9d41e33a51648809f5e4cf0bf
Sha1
d8c205f03faf65f7f5a88bfc1143751049f11aec
Sha256
c996755214ce2f6130d9613bcdbfa76ecdd5e2ca08bd32845acda1c42a7bef6c
Sha384
17889c182c56f477fdbd764140ae262b64ce79853788639f9e24a4736b8f6c322c1e6ada71e0a0724401175d02f90369
Sha512
5fbf7313ef519be349769ad5b8cc8c800a750315e0986650c213abd4b4a9c70103f75fb17765af1e0cd41598ea100ed7a5c5dc01f314ee120b73a0dd2aaf1807
SSDeep
12:5jNrJpvaI+fA+roZxyxyS9wkT1Qf3E/qhhhtNCM3nozlSyyzdsmGHlh7I8ofcimH:9Nr8SEKkpKhBh3oR8zdsmG7Xi4tZin2l
TLSH
CE1184378C4C7154CC8240330576094B73BAA6CAA462F6D27091F80829A60A7DFA11E4
3 malicious · 3 files
ZIPf4880ab9d41e33a51648809f5e4cf0bfT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKDOC-AVX98D.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
arc:zip>lnk~T1059.003~T1202~T1204.002
Shape
arc:zip>lnk
malicious
2 nodes
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential3 malicious · 3 files
ZIPf4880ab9d41e33a51648809f5e4cf0bfT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKDOC-AVX98D.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
No malware configuration was found at this point.
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
f4880ab9d41e33a51648809f5e4cf0bf › DOC-AVX98D.lnk
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with EssentialSign in or create a free account to view the matching YARA rules.
Create a free account