Malicious
02827c39d6f4dac214abbf05e1e6c653
ZIP Archive
MD5: 02827c39d6f4dac214abbf05e1e6c653
Size: 965 B
application/zip
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
ZIP archive
Size
965 B · 965 B
Hashes
MD5
02827c39d6f4dac214abbf05e1e6c653
Sha1
f7ab450867281981ca9dac0f8f88ff2b0aa42d36
Sha256
da2ac4ab8e04bf3914d1dbc3ffb2d83f5c41f926e42b3612de813af991159f6d
Sha384
2e9a4cb52c02fae77b960a0415165626a091524e90ec1540a0b577e4a3185101701503a67dbf237b0a800359d7983ce0
Sha512
c9f0339c3bc348f4a6ece292e0cfe56bbdacaff917418a4ae1792ee4afc53e3f062fae45492cbaab78381b9d58ec7383a4e82dfea69ad8063bf660a3a7015500
SSDeep
24:9UXXkg14D2cqPNNo+Ih9zdFRX56Snmg8/DqgcmYWN4szffrsnBWKbCx:9HY4691No+aldFD6smJmgCadYBNCx
TLSH
0511888B48351534C5C590B70754B3578EF83802170A9B6E68FFBDADAC0790A9F9C7C2
3 malicious · 3 files
ZIP02827c39d6f4dac214abbf05e1e6c653T1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKDOC-XX8LXU.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
arc:zip>lnk~T1059.003~T1202~T1204.002
Shape
arc:zip>lnk
malicious
2 nodes
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential3 malicious · 3 files
ZIP02827c39d6f4dac214abbf05e1e6c653T1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKDOC-XX8LXU.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
No malware configuration was found at this point.
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
02827c39d6f4dac214abbf05e1e6c653 › DOC-XX8LXU.lnk
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with EssentialSign in or create a free account to view the matching YARA rules.
Create a free account