Malicious
ZIP Archive
MD5: ff90a29f61599fc77493e894b0e06df1
Size: 578 B
application/zip
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
ZIP archive
Size
578 B · 578 B
First seen
2026-08-03 11:58 · 2 months ago
Last seen
2026-08-03 11:58 · 2 months ago
Last analysis
2026-08-03 11:58 · 2 months ago
Hashes
MD5
ff90a29f61599fc77493e894b0e06df1
Sha1
21e7488b5543497310cee1b2f9e3b6c41e7df8d2
Sha256
b220f63dd806f653286d02159348f2fcec2760daa6874dafa8663f3648f5f784
Sha384
95765b3ea503b246bb111280bf4ffa215a6a46501eab63bd8cfbfb2a444b3380d2b76d8885a17a6e52d149cf4417801a
Sha512
cce9973ba510b532adbee1211ba59fbbf9f0232c1512f03bb7eba3d4435676c8f4d61ecb0ca4a669ca7b50e67ab6da3b61d9455ef94ad9a6f1b26942e673d4ac
SSDeep
12:5j/+gTDzhW7FAnZbTQnr7FS2JcUK6lkMTa+K+Paou:9mgTn5nZXQnUASMT5FRu
TLSH
C5F090A32083C007C02108B2E2BB30F8E25EDCF0C0035EA436EBA34FA00C0243B5829D
3 malicious · 3 files
ZIPff90a29f61599fc77493e894b0e06df1T1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKDOC-C48TTX.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
arc:zip>lnk~T1059.003~T1202~T1204.002
Shape
arc:zip>lnk
malicious
2 nodes
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential