Malicious
0d5d6f8df4ae57d92bf4dd4971620920
ZIP Archive
MD5: 0d5d6f8df4ae57d92bf4dd4971620920
Size: 2.73 KB
application/zip
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with Essential
| MD5 | 0d5d6f8df4ae57d92bf4dd4971620920 |
| Sha1 | 2eb514bde1859e7543e8a1f02acf6a2f75f125aa |
| Sha256 | 9340d9c33d5a96602e2270e3892a3b03ffb908879acbdec69c50421990d11d93 |
| Sha384 | 6e1eb6ca9bc53c01912ff8d1c71b5859d5f905483505aef2a423c843028f0340150e75f94a996d58b7729301030eefd7 |
| Sha512 | a39aa1f8f3baf6b796f02642fb92d059a5a08aed0afc738d7af7a0f91366f87576a9d6127d92f5b874e9ba4dc96b6536dc47d270d9117706db70109fe4e593e7 |
| SSDeep | 48:97Y9DnuZ9EoG4hdem2/002W2vV1/AWsD9MwE5jX:YDuEb+E/M1/A0T |
| TLSH | 5D512EB40C977462C7E387F7B1974E88563828531DD91505E35EA1485DD57A773033F4 |
Malicious
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
Structural branches: 2
STICH kept: 1secondary ignored: 1
bin
1Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
arc:zip>lnk~T1059.001~T1059.003~T1202~T1204.002>lnk:cmd
Shape
arc:zip>lnk>lnk:cmd
malicious
3 nodes
LNK: Command Execution
UNKNWOWNmalicious
powershuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential
Malicious
No malware configuration was found at this point.
LNK: Command Execution
UNKNWOWNmalicious
powershuhuhuhuhuhuhuhuhuhuhu
0d5d6f8df4ae57d92bf4dd4971620920 › IMG_20260724_224151.jpg.lnk
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential
You must be signed in to view YARA rules.