Malicious
ZIP Archive
MD5: 0ce9bab8bb78e75a0ce1892df5cfa80e
Size: 581 B
application/zip
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
ZIP archive
Size
581 B · 581 B
First seen
2026-08-03 13:47 · 2 months ago
Last seen
2026-08-03 13:47 · 2 months ago
Last analysis
2026-08-03 13:47 · 2 months ago
Hashes
MD5
0ce9bab8bb78e75a0ce1892df5cfa80e
Sha1
8dc22495af778c35cf28ffd8db1cfd3a71f75cd0
Sha256
4893980ab18f03638922df80f357e27430f9004f506d31695658ff547f159929
Sha384
cd2fd7e72e4053c10c230f047a1f4b6449b29465e9da956338cc01e7f9b7df182f90ca61afd0689d68b726209e140109
Sha512
ba8165b926c6337b0502b1a594e544710c575ef4d453e20dbd1fea45d4821580d0c160972936de99cc3a6adc07b3d8cbb454c99afa0f89c77d164d6c6adf477c
SSDeep
12:5j+4/S6iqKpDaLriYJipLtIY1fxL3jd5Lw2hqeb7dEBcKNach4uaoT:9lS6iqKsFcltIY1fpzvwzebhEGcfT
TLSH
E8F041F7CA3C0102D94884737A5177B06AA54A18816D85E8292AC807A5151C22F54C41
3 malicious · 3 files
ZIP0ce9bab8bb78e75a0ce1892df5cfa80eT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKDOC-NJ4B3Z.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
arc:zip>lnk~T1059.003~T1202~T1204.002
Shape
arc:zip>lnk
malicious
2 nodes
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential