Malicious
0b996e9c9c44d80cf90b5779fdb0abf9
ZIP Archive
MD5: 0b996e9c9c44d80cf90b5779fdb0abf9
Size: 585 B
application/zip
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
ZIP archive
Size
585 B · 585 B
First seen
2026-08-03 11:19 · 2 months ago
Last seen
2026-08-03 11:19 · 2 months ago
Last analysis
2026-08-03 11:19 · 2 months ago
Hashes
MD5
0b996e9c9c44d80cf90b5779fdb0abf9
Sha1
71351687755d7761ad02a33a90ce66c51da31b73
Sha256
5890216b2a3334d03286add06650613615e91c059012e15cee06d99c523c2026
Sha384
41960dc15bdab7aa5cf70de6332479afe6f1b04015696dbd76becd7797a726316cbdfb2c7deb1028af980e10c75586bd
Sha512
c01812ec5bb1752476b770844329625ca4e297da38b6eea20a10e25669b3cc865b99b4dee6ee2a18daf66035ee6c3c94e0db8b057512370fa89036e9bca46b16
SSDeep
12:5jV8Fh3NZr8zG5ExvIrM8qmmplFL6qZzDl0UKYOZRpvaoH:9V8Fh3f7QvYMiELOqTR6pxH
TLSH
65F04171554E7006D8A360FFEF3166AAC12150141246F37E3AACE885DBE39854E8C2D8
3 malicious · 3 files
ZIP0b996e9c9c44d80cf90b5779fdb0abf9T1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKDOC-029R8P.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
arc:zip>lnk~T1059.003~T1202~T1204.002
Shape
arc:zip>lnk
malicious
2 nodes
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential3 malicious · 3 files
ZIP0b996e9c9c44d80cf90b5779fdb0abf9T1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKDOC-029R8P.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
No malware configuration was found at this point.
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
0b996e9c9c44d80cf90b5779fdb0abf9 › DOC-029R8P.lnk
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with EssentialSign in or create a free account to view the matching YARA rules.
Create a free account