Malicious
0b343125cf8913900ff7aa79486d21a5
ZIP Archive
MD5: 0b343125cf8913900ff7aa79486d21a5
Size: 969 B
application/zip
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
ZIP archive
Size
969 B · 969 B
First seen
2026-08-03 13:42 · 2 months ago
Last seen
2026-08-03 13:42 · 2 months ago
Last analysis
2026-08-03 13:42 · 2 months ago
Hashes
MD5
0b343125cf8913900ff7aa79486d21a5
Sha1
7852b195bf60045b6b6921bda872f79c4225b5cd
Sha256
024f8d908938f5c179d5ab2c70d8f179f38a7088867c9ca81a739ecf8c0ba660
Sha384
fd767b715f9202ee4e55ced635597cb281eda0b6f639c1a2e0c05ec8b970c4d6188bf181fc1748e79406abc641e2bc0e
Sha512
8116fdaac29136600093e13cead22f4349651a5c2f6fb031eb62d3fc58bb4f3b34750233a9918739ccca194e4339d916a40dcfd456a7f9d28062b49deda37988
SSDeep
24:92sqVoPMv3Gs4XUQt7PAWJIpIaDgG2F9+xgjuToK8rBIRcXPt:9CWPA3G2CzPa06xwvKaBll
TLSH
B911C815307D521AC98688BCD430BB3EF2E2CEAC2C5C5B80AA5D4295CC410BD3E08B1D
3 malicious · 3 files
ZIP0b343125cf8913900ff7aa79486d21a5T1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKDOC-XZT0ZJ.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
arc:zip>lnk~T1059.003~T1202~T1204.002
Shape
arc:zip>lnk
malicious
2 nodes
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential3 malicious · 3 files
ZIP0b343125cf8913900ff7aa79486d21a5T1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKDOC-XZT0ZJ.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
No malware configuration was found at this point.
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
0b343125cf8913900ff7aa79486d21a5 › DOC-XZT0ZJ.lnk
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with EssentialSign in or create a free account to view the matching YARA rules.
Create a free account