Malicious
0c6cf88726759edc043829d56c29453b
ZIP Archive
MD5: 0c6cf88726759edc043829d56c29453b
Size: 592 B
application/zip
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
ZIP archive
Size
592 B · 592 B
First seen
2026-08-03 12:17 · 2 months ago
Last seen
2026-08-03 12:17 · 2 months ago
Last analysis
2026-08-03 12:17 · 2 months ago
Hashes
MD5
0c6cf88726759edc043829d56c29453b
Sha1
8879e409666b2871ddfa8141b7a84836c6c07d73
Sha256
fe78303ec3916fd1d9253c5fd77abcd2ddcbe3fa238ce54a2482317dd46a767f
Sha384
7de2ed394383fc010f428e0b66b1db370c34c189dfbf80ea48c13b3d32ccacbb73c590a8965b2f4788f041692a373673
Sha512
bb20d0471f9210b93a15aaf901a16389d7e6ce1cc51b7e263467c5a21dab7f3c7f490f84b467114ba9f6c45fef1bb704e92087d5a1069d6a820ce351efb45074
SSDeep
12:5j4w/qh+trsB5Jb2eA3yxPKHSm5QuXME1S8iPRqvN52namB+w/zaBX:9fihHB5QL3yFl0M/svN52amB58
TLSH
EEF0410AF062A9CCC23C9BF0A132E5320E38202801DF922A52B9964A249A0DC4EED2D1
3 malicious · 3 files
ZIP0c6cf88726759edc043829d56c29453bT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKLeXNET-DOC-ZU89ZR.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
arc:zip>lnk~T1059.003~T1202~T1204.002
Shape
arc:zip>lnk
malicious
2 nodes
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential3 malicious · 3 files
ZIP0c6cf88726759edc043829d56c29453bT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKLeXNET-DOC-ZU89ZR.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
No malware configuration was found at this point.
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
0c6cf88726759edc043829d56c29453b › LeXNET-DOC-ZU89ZR.lnk
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with EssentialSign in or create a free account to view the matching YARA rules.
Create a free account