Malicious
0e2f5dd250feaa040f6b6d1e1280448d
ZIP Archive
MD5: 0e2f5dd250feaa040f6b6d1e1280448d
Size: 587 B
application/zip
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
ZIP archive
Size
587 B · 587 B
First seen
2026-08-03 12:13 · 2 months ago
Last seen
2026-08-03 12:13 · 2 months ago
Last analysis
2026-08-03 12:13 · 2 months ago
Hashes
MD5
0e2f5dd250feaa040f6b6d1e1280448d
Sha1
7ad09c7a6660123e7725c476e4365185f1b5d0cf
Sha256
440c5fc00570d644a656b80495e7ec73a96190e0cc57109902590d6e50ee4d89
Sha384
5e0a185b17ee81e08ea6902c6b95735a505af1c23903f861a42a63883fad0a966e2c368279b6cf7e27a36128bf1d7bba
Sha512
5238172fec171e617bae69ed2e84466c543da830d2e1863ade22679046b3cc20e020cf0a014c686968ea332af358c45a6c046afcf0bcbe850df06ce16f18b969
SSDeep
12:5jzpg/jGSFF2Neq23WuffFzye2in9VHIpLAa9KprSGXy6vb/CpTJz79SgkiaG:9NmjfCer3Fy56eLHs3XDYJn0bY
TLSH
07F041A4F242153AC043C077913E4254370480B0129E963A003CFFDC05D0ADD9D64DED
3 malicious · 3 files
ZIP0e2f5dd250feaa040f6b6d1e1280448dT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKPDFDOC-8R8CBU.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
arc:zip>lnk~T1059.003~T1202~T1204.002
Shape
arc:zip>lnk
malicious
2 nodes
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential3 malicious · 3 files
ZIP0e2f5dd250feaa040f6b6d1e1280448dT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKPDFDOC-8R8CBU.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
No malware configuration was found at this point.
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
0e2f5dd250feaa040f6b6d1e1280448d › PDFDOC-8R8CBU.lnk
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with EssentialSign in or create a free account to view the matching YARA rules.
Create a free account