Malicious
Malicious

f60f8712e222888e143760595342994f

Share on LinkedIn
Print
ZIP Archive
MD5: f60f8712e222888e143760595342994f
Size: 581 B
application/zip
Ctrl + scroll to zoom · drag to pan

This sample is a 581 bytes ZIP Archive classified as malicious by Malva.RE (lolbin). Static analysis extracted 2 embedded or derived files. It matches 1 YARA rule. Observed behaviours map to MITRE ATT&CK T1059.003, T1202: INDIRECT COMMAND EXECUTION and T1204.002. The file was analysed statically: it was parsed and decompiled, never executed.

SHA256
671b45e056d0501142c30080fd311765044a7eb11fa6ce11082e5dbd6e010b25
MD5
f60f8712e222888e143760595342994f
Verdict
Malicious
File type
ZIP Archive · 581 bytes
Category
LOLBin

Cite this report: https://app.malva.re/sha256/671b45e056d0501142c30080fd311765044a7eb11fa6ce11082e5dbd6e010b25

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential

File
Type
ZIP archive
Size
581 B · 581 B
First seen
2026-08-03 10:23 · 2 months ago
Last seen
2026-08-03 10:23 · 2 months ago
Last analysis
2026-08-03 10:23 · 2 months ago
Hashes
MD5 f60f8712e222888e143760595342994f Sha1 1a09cc7159795e7f63a831c2dba684bcb825dccc Sha256 671b45e056d0501142c30080fd311765044a7eb11fa6ce11082e5dbd6e010b25 Sha384 62e10539159b6d120639cf3b65f7314aae87722f4dce5bc15bdd07a3f884659f10a594813a3fa5ab8480622b80e4942f Sha512 34604dcae911fd610c62b06c766d8940c89c60f790f0633d3dcfeef5344bcb9a3d56d1c54a244b9b248490cea38e5c40e975c63c339c020a72cf6f9eb0cbac5c SSDeep 12:5jg25J/VZwVNpMlQlQb5+5FO2Yl3lN6g6OGzKZ6NiUCjacOD5JcaoT:9gxpWv+5FO2Y1uMG+ZzUNcOcT TLSH ABF0267686F904CCCED7C5F44D258217A39C1CE85D4FB5B6C1399902DA424C31D18D4E

3 malicious · 3 files
ZIPf60f8712e222888e143760595342994fLOLBin
LNKDOC-P6J8US.lnkLOLBin
BIN[Lnk Summary]
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
Path arc:zip>lnk~T1059.003~T1202~T1204.002
Shape arc:zip>lnk
malicious 2 nodes

LNK: Command Execution UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential

An error has occurred. This application may no longer respond until reloaded. Reload 🗙