Malicious
ZIP Archive
MD5: f9275aa4df0dff968aa0fccd2c797d5c
Size: 859 B
application/zip
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
ZIP archive
Size
859 B · 859 B
First seen
2026-08-04 08:22 · 2 months ago
Last seen
2026-08-04 08:22 · 2 months ago
Last analysis
2026-08-04 08:23 · 2 months ago
Hashes
MD5
f9275aa4df0dff968aa0fccd2c797d5c
Sha1
c2cf59f11780db8637aab678c78d2050972fc9e6
Sha256
a040562473bdaba311c1133cb31eab108960baaa0402b56cdbfba83753851292
Sha384
468269ff20ad4363d2b4c56afc9bd97bd1c74bbad2a46b41ae89e5731fd0381fe44c3ade354530fa653442d5d7172541
Sha512
7cbad823fc144bedacdbc529d4663d94badef1ed17f91add9213da9dfd1b8bfe1ce5ef3e04eecce44bbe1ecdf4139a9d7f334c645779c9a483f082d68c5679e1
SSDeep
24:9Ntxape3MqIZV0K6bYeObhlrBjFs7jojLLe727r1k7J3:9F0tZ2K6bYek51FsWq2H1k7J3
TLSH
8711DA2F0A1E950CDE73E9F7911B9787F35C420050C1215BC20C65411B03C9C5782DF0
3 malicious · 3 files
ZIPf9275aa4df0dff968aa0fccd2c797d5cT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKDOC-LA1JO2.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
arc:zip>lnk~T1059.003~T1202~T1204.002
Shape
arc:zip>lnk
malicious
2 nodes
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential