Malicious
076c4cff135ec2308e9377c28a5b894e
ZIP Archive
MD5: 076c4cff135ec2308e9377c28a5b894e
Size: 590 B
application/zip
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
ZIP archive
Size
590 B · 590 B
Hashes
MD5
076c4cff135ec2308e9377c28a5b894e
Sha1
3bb6200576f9f6c1d841fcba413f1b415cb84620
Sha256
094d65bc5c6f6125fa7f5983a4a060d2a0e7fe5e9004efa4adc74d59f8b753e3
Sha384
ad019e44a504e02fe13e13ea43cc5a74343a2cf83d92cfb2920315ab081fbe7b7b200d7621f037a473342f440be94859
Sha512
48a7689f6b540ea975ce5b4eafffbedd917895afd9118d5915db7a5471a5bd9f619c84fa5c3c527660ef0c4bc5e1d4ef3206f3d1d98c4f8a9ff93dafe5f177bd
SSDeep
12:5j+YGSbyt98kRuuHQkSlLv6bqWR8Rqjsyyvrf1l45P4YGSmyPaH:9+pt98wuMQkSluWWR87prfOP4Oq
TLSH
58F04BA9827FE8B2C743327319D15BB0473638A801134B0E5C2F91085DF069A9B020F8
3 malicious · 3 files
ZIP076c4cff135ec2308e9377c28a5b894eT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKPDFDOC-9CNH8Q.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
arc:zip>lnk~T1059.003~T1202~T1204.002
Shape
arc:zip>lnk
malicious
2 nodes
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential3 malicious · 3 files
ZIP076c4cff135ec2308e9377c28a5b894eT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKPDFDOC-9CNH8Q.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
No malware configuration was found at this point.
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
076c4cff135ec2308e9377c28a5b894e › PDFDOC-9CNH8Q.lnk
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with EssentialSign in or create a free account to view the matching YARA rules.
Create a free account