Malicious
0c2d11c547eb97de51c91eedfcac340c
ZIP Archive
MD5: 0c2d11c547eb97de51c91eedfcac340c
Size: 891 B
application/zip
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
ZIP archive
Size
891 B · 891 B
First seen
2026-08-03 13:36 · 2 months ago
Last seen
2026-08-03 13:36 · 2 months ago
Last analysis
2026-08-03 13:36 · 2 months ago
Hashes
MD5
0c2d11c547eb97de51c91eedfcac340c
Sha1
d09a79174d637d2ec08e23c39ad22cac7f84a32a
Sha256
c907a2e7d2fab8e45e8cf92e505985bdfceda9f3394ed3e62e55b7df0f40866f
Sha384
309c84b04a58aacbd7bc6f5f5269e983fcbce5601df15c1e6a6cac82cf67e5dc058710dd59378f079fcbea188aaca759
Sha512
5467859b93ec48edeae90815f659dfed51a8d49125e87c31fad3834e1cd5c6bb18fc7344a7f16913db2cd4a714b6be8f6e3f8b9a0e40d8875587dfaf21b74b61
SSDeep
12:5jB9R7+VSl/YxzBm341xmBsuG7qypybiSwA3YWJXHFg6lwMoqyIMCeP8GTUZJzep:930VSWxIW9uXEy0AoWHcMt9GmJKt//
TLSH
821196B7F0B167D4D383E2B452BE14C297CF63A0104DF7429C2A641615306710E0ABF2
3 malicious · 3 files
ZIP0c2d11c547eb97de51c91eedfcac340cT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKDOC-0IA3EB.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
arc:zip>lnk~T1059.003~T1202~T1204.002
Shape
arc:zip>lnk
malicious
2 nodes
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential3 malicious · 3 files
ZIP0c2d11c547eb97de51c91eedfcac340cT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKDOC-0IA3EB.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
No malware configuration was found at this point.
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
0c2d11c547eb97de51c91eedfcac340c › DOC-0IA3EB.lnk
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with EssentialSign in or create a free account to view the matching YARA rules.
Create a free account