Open-source atomic malware analysis

Analyze another

66c3d1cd6b3835c0c756c08abb52012e5bec6b1d9a637dccbe488e4d921b34d3.zip

ZIP
Verdict: SUSPICIOUS
SHA256: 2c42ab0ef732eccc8f9fd4ea78bcb3c7b11c0bf5f8cac3ee2b61542db4644690
Mal-ecule
O(Xe)H₂(DbF)
Size 868.6 KB download
First seen 131 days ago
Analyzed 129 days ago
Ecosystem Cute-Stealers

Objectives

suspicious severity, 85% confident.
execution/lnk LNK uses COMSPEC environment variable

Micro-behaviors

component severity, 90% confident.
data/archive RAR member contains WSH script
component severity, 80% confident.
fs LNK contains UTF-16 parent traversal

Identity

SHA-256 2c42ab0ef732eccc8f9fd4ea78bcb3c7b11c0bf5f8cac3ee2b61542db4644690
Filename 66c3d1cd6b3835c0c756c08abb52012e5bec6b1d9a637dccbe488e4d921b34d3.zip

Origin

Source harvest
Feed datasets
Ecosystem Cute-Stealers

Timeline

First seen 24 Apr 2026 16:19 UTC
Last analyzed 26 Apr 2026 21:48 UTC
Last updated 26 Apr 2026 21:48 UTC

Labeling

Label bad
Label source harvest
Traits version 1a4dd