Malicious
Malicious

fbf89a143f7070ab0fba145ed7fe6ad5

ZIP Archive
MD5: fbf89a143f7070ab0fba145ed7fe6ad5
Size: 888 B
application/zip

This sample is a 888 bytes ZIP Archive for which Malva.RE's static analysis did not establish a malicious verdict. Static analysis extracted 2 embedded or derived files. It matches 1 YARA rule. Observed behaviours map to MITRE ATT&CK T1059.003, T1202: INDIRECT COMMAND EXECUTION and T1204.002. The file was analysed statically: it was parsed and decompiled, never executed.

SHA256
e1daf3715b30eca7cf04bb6c92ef064bcd873199e1ac3ed553b3d30884eb6dc6
MD5
fbf89a143f7070ab0fba145ed7fe6ad5
Verdict
Malicious
File type
ZIP Archive · 888 bytes
Category
LOLBin

Cite this report: https://app.malva.re/sha256/e1daf3715b30eca7cf04bb6c92ef064bcd873199e1ac3ed553b3d30884eb6dc6

Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential

File
Type
ZIP archive
Size
888 B · 888 B
First seen
2026-08-04 08:06 · 2 months ago
Last seen
2026-08-04 08:06 · 2 months ago
Last analysis
2026-08-04 08:06 · 2 months ago
Hashes
MD5 fbf89a143f7070ab0fba145ed7fe6ad5 Sha1 7cd03277130cf7bac199c74a73024834ea40f2ff Sha256 e1daf3715b30eca7cf04bb6c92ef064bcd873199e1ac3ed553b3d30884eb6dc6 Sha384 cbb98f312efc130871c97e36a098e2bee07a7ec855bb0dbf37dd8743f2b706b8a531b75258832533ede267c8da7685d2 Sha512 bc5e3afbde10234b9fd7ae76e0b78905bc69060df9460c9a2a7edf6875e288482a42b1fe3c8323d0b5458b3ae35b8afc505c9a60c4a54bc18dedc50ff6e5b58e SSDeep 24:9+MIAbe8QsZgrvjEDE7UFj2EMgv4Ng4ja:9r5y8Q6Sgg7UFj2EMgH8a TLSH 2211E6CF5B45F101FE33D97B0113AB61432308822E0B8B9B8E3C90042880FA867584F5

3 malicious · 3 files
ZIPfbf89a143f7070ab0fba145ed7fe6ad5LOLBin
LNKDOC-KEZNKR.lnkLOLBin
BIN[Lnk Summary]
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
Path arc:zip>lnk~T1059.003~T1202~T1204.002
Shape arc:zip>lnk
malicious 2 nodes

LNK: Command Execution UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential

3 malicious · 3 files
ZIPfbf89a143f7070ab0fba145ed7fe6ad5LOLBin
LNKDOC-KEZNKR.lnkLOLBin
BIN[Lnk Summary]
No malware configuration was found at this point.

LNK: Command Execution UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
fbf89a143f7070ab0fba145ed7fe6ad5 › DOC-KEZNKR.lnk
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential
Sign in or create a free account to view the matching YARA rules. Create a free account
An error has occurred. This application may no longer respond until reloaded. Reload 🗙