Malicious
Malicious

fbe41967aa0389c56f90e1f70f974478

ZIP Archive
MD5: fbe41967aa0389c56f90e1f70f974478
Size: 996 B
application/zip
Ctrl + scroll to zoom · drag to pan

This sample is a 996 bytes ZIP Archive classified as malicious by Malva.RE (lolbin). Static analysis extracted 2 embedded or derived files. It matches 1 YARA rule. Observed behaviours map to MITRE ATT&CK T1059.003, T1202: INDIRECT COMMAND EXECUTION and T1204.002. The file was analysed statically: it was parsed and decompiled, never executed.

SHA256
61cf68f1336842dd9d1fa54ab6468e86d96593a09263431f461bd62d4c08ce38
MD5
fbe41967aa0389c56f90e1f70f974478
Verdict
Malicious
File type
ZIP Archive · 996 bytes
Category
LOLBin

Cite this report: https://app.malva.re/sha256/61cf68f1336842dd9d1fa54ab6468e86d96593a09263431f461bd62d4c08ce38

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential

File
Type
ZIP archive
Size
996 B · 996 B
First seen
2026-08-04 08:07 · 2 months ago
Last seen
2026-08-04 08:07 · 2 months ago
Last analysis
2026-08-04 08:07 · 2 months ago
Hashes
MD5 fbe41967aa0389c56f90e1f70f974478 Sha1 0f8147218ccacc2d7f52f0ae4507954b53200f4e Sha256 61cf68f1336842dd9d1fa54ab6468e86d96593a09263431f461bd62d4c08ce38 Sha384 fbc891fb8899792458379b3b326196ea3bb1f47c86e0cfe595ca058bf0e23677b98f31670ae6230b3e33c68b07225068 Sha512 19e6a4adc60f02ea11afae14f068c23dec64de0bc18df31fca1c8257be6b9779f5d65d7974610110b1df60aaa4a83c18deb87a75bf322df0a90206df535b70ed SSDeep 24:9oY+CjXFViKLn7S5g4YlQlw/+7bvM3Ka+PsP/2Xe2:9okjDL794YY7Tra+bXe2 TLSH 8B11C8E3F941734CC28285BC2AB5AE0207FBF4C49022299AED6CC5840E4E7CD4789744

3 malicious · 3 files
ZIPfbe41967aa0389c56f90e1f70f974478LOLBin
LNKDOC-M800PN.lnkLOLBin
BIN[Lnk Summary]
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
Path arc:zip>lnk~T1059.003~T1202~T1204.002
Shape arc:zip>lnk
malicious 2 nodes

LNK: Command Execution UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential

3 malicious · 3 files
ZIPfbe41967aa0389c56f90e1f70f974478LOLBin
LNKDOC-M800PN.lnkLOLBin
BIN[Lnk Summary]
No malware configuration was found at this point.

LNK: Command Execution UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
fbe41967aa0389c56f90e1f70f974478 › DOC-M800PN.lnk
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential
Sign in or create a free account to view the matching YARA rules. Create a free account
An error has occurred. This application may no longer respond until reloaded. Reload 🗙