Malicious
0ba065386767c4e207388802a5b9c659
ZIP Archive
MD5: 0ba065386767c4e207388802a5b9c659
Size: 922 B
application/zip
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
ZIP archive
Size
922 B · 922 B
First seen
2026-08-04 08:22 · 2 months ago
Last seen
2026-08-04 08:22 · 2 months ago
Last analysis
2026-08-04 08:22 · 2 months ago
Hashes
MD5
0ba065386767c4e207388802a5b9c659
Sha1
0652dbc2b2b50b1f17e6c14cccd1b555dc735463
Sha256
7fafabe78451e87f96bbe7d2f94001f3246e75964b42837f5eba67e37709b76c
Sha384
6cf04fb9c32d051302f7a8a6c15d6d4270e0b4ef973ab317c744ee6cad6f6709f74e3ba303e1989e2cc51cb380943d7e
Sha512
a7177b8089ebcf39e0fc27e2654d311a681621fa856827e50aed189e2930bdaea50087404b27b53eb6c1777736eab368a470597b5869fc43761ebe4564944440
SSDeep
24:9FADhjFkmBjru5TnYySG3cHNdCeyPf3ndByps7NU:9FADQmBv2TYzG3mM3dByy7NU
TLSH
65116769482AF9D5C661CA7C6A30304B653FF09241870442107ACC49601E567FD0BF86
3 malicious · 3 files
ZIP0ba065386767c4e207388802a5b9c659T1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKDOC-U65JU5.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
arc:zip>lnk~T1059.003~T1202~T1204.002
Shape
arc:zip>lnk
malicious
2 nodes
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential3 malicious · 3 files
ZIP0ba065386767c4e207388802a5b9c659T1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKDOC-U65JU5.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
No malware configuration was found at this point.
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
0ba065386767c4e207388802a5b9c659 › DOC-U65JU5.lnk
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with EssentialSign in or create a free account to view the matching YARA rules.
Create a free account