Malicious
0ea23b1014acffedd70ca28ed750775e
ZIP Archive
MD5: 0ea23b1014acffedd70ca28ed750775e
Size: 576 B
application/zip
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
ZIP archive
Size
576 B · 576 B
First seen
2026-08-03 10:32 · 2 months ago
Last seen
2026-08-03 10:32 · 2 months ago
Last analysis
2026-08-03 10:32 · 2 months ago
Hashes
MD5
0ea23b1014acffedd70ca28ed750775e
Sha1
9faf466c1e69a2daaac1059074121172fd61b91c
Sha256
d20b4209667f765e57d3eb52adf0c4a77d792948784b8ada6b17efd6cac3b6f2
Sha384
bf1e2acc18679c229b240a1dcb114f8cc2da49f7a12fb35d888a8a2ef9ae1035dc24afc5971d2dd0c4c6bc38af2202dc
Sha512
a54936b08932db36863972cfc8fa115d30333ff6f293029de309cf309a321b52c9e218ed0f43917469531f016e6e5c2a95b60fc9e163131d80f558f3002dfc2f
SSDeep
12:5jW7v35o9Zc9mPDY98nD/2r12H6o+I9DwIvYaoQ:9gP5o9Zemc9S/2RueIRF8Q
TLSH
6FF026BA0D2B5200C593703C30F9317141E0244B661B0B3A85FBE55508616B02D8EEF6
3 malicious · 3 files
ZIP0ea23b1014acffedd70ca28ed750775eT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKDOC-ZQCILT.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
arc:zip>lnk~T1059.003~T1202~T1204.002
Shape
arc:zip>lnk
malicious
2 nodes
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential3 malicious · 3 files
ZIP0ea23b1014acffedd70ca28ed750775eT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKDOC-ZQCILT.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
No malware configuration was found at this point.
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
0ea23b1014acffedd70ca28ed750775e › DOC-ZQCILT.lnk
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with EssentialSign in or create a free account to view the matching YARA rules.
Create a free account