Malicious
127df9402c3751e73352fc05470abf26
ZIP Archive
MD5: 127df9402c3751e73352fc05470abf26
Size: 590 B
application/zip
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
ZIP archive
Size
590 B · 590 B
First seen
2026-08-03 12:09 · 2 months ago
Last seen
2026-08-03 12:09 · 2 months ago
Last analysis
2026-08-03 12:09 · 2 months ago
Hashes
MD5
127df9402c3751e73352fc05470abf26
Sha1
35ca59d46f1f49bf5d058b424677cdca5de4d754
Sha256
b7e7e7681ae26626402893597375f743b95f6d9ba267eac9d11cff0860150aa6
Sha384
ab8b10a21e3f925d49588e6478da09b6078fb9d8ee1c18ebe9e9e4f92347a91b7d2e7735ea3aa01cc3ca285d3044229d
Sha512
dc0ee6c5c86f2083a2117b1ea8dacf734bd3863b11fc251814895f89952503a19a7cbc8ce5bfa0d311fa1d2eebc171091f4f3389bf9c1b1b5e57aa0a29f34e97
SSDeep
12:5j7FlqmSI2PMaPfud2v18roNSjoCeAWUBqUYu/OjK00ctFlq/6aCkn:9JAIIDrv1tS4AWUBqUd/OjKTczA
TLSH
C5F0E11619290303CF244D7967726718C978CC16EE66749ADA0BE5C31EC97E94A52894
3 malicious · 3 files
ZIP127df9402c3751e73352fc05470abf26T1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKLeXNET-DOC-1Q7B5L.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
arc:zip>lnk~T1059.003~T1202~T1204.002
Shape
arc:zip>lnk
malicious
2 nodes
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential3 malicious · 3 files
ZIP127df9402c3751e73352fc05470abf26T1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKLeXNET-DOC-1Q7B5L.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
No malware configuration was found at this point.
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
127df9402c3751e73352fc05470abf26 › LeXNET-DOC-1Q7B5L.lnk
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with EssentialSign in or create a free account to view the matching YARA rules.
Create a free account