Malicious
ZIP Archive
MD5: f63943b80b4330b04dccd4c543f53d44
Size: 833 B
application/zip
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
ZIP archive
Size
833 B · 833 B
First seen
2026-08-04 08:35 · 2 months ago
Last seen
2026-08-04 08:35 · 2 months ago
Last analysis
2026-08-04 08:35 · 2 months ago
Hashes
MD5
f63943b80b4330b04dccd4c543f53d44
Sha1
6b3de9df59682af229825bf755630618e7ce812a
Sha256
156ee53ffe2b527ac1d4f712918efad6cb24bac33053b979e80254aa91ec85fe
Sha384
e2a2ee28bf972a11b5552d9bfb6c02026d1194d1cbe94900bef1a86d777d7842d9bd6817d3323c24311ea27dbf278766
Sha512
a2e5e8b57186ee495045c5ce5459dc2123750efb65bdaa6223919aeb1106623305e03be03ea2808791541531e62857f36f029c432eee687870517f121d3f259c
SSDeep
24:9HT3tT+lijYL6CY1Lu1HSou/dSMt0niwlfYoZI368:9Usjkiq1yHIMWn7lfYoF8
TLSH
030146858819515EE126B63B10BD12CFD072E149E1495C130EBDB42F1F939A3DA5D61F
3 malicious · 3 files
ZIPf63943b80b4330b04dccd4c543f53d44T1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKDOC-BLEY1F.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
arc:zip>lnk~T1059.003~T1202~T1204.002
Shape
arc:zip>lnk
malicious
2 nodes
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential