Malicious
197cfe025efa00e013c2d5a293361ed1
ZIP Archive
MD5: 197cfe025efa00e013c2d5a293361ed1
Size: 909 B
application/zip
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
ZIP archive
Size
909 B · 909 B
First seen
2026-08-04 08:17 · 2 months ago
Last seen
2026-08-04 08:17 · 2 months ago
Last analysis
2026-08-04 08:17 · 2 months ago
Hashes
MD5
197cfe025efa00e013c2d5a293361ed1
Sha1
01b53cad98efdebb59cfa5f179252ef6609a797d
Sha256
209f2ce54982147788550f8eb0c793f6f5b1e71d9c8b472d6883dd0b5852280b
Sha384
84bfd2f51447b918d1925f47cfd7e43a521204fe4b70adbc2f28d110b87fed01d0f22bd354dd03e707ebe49468bbe0c2
Sha512
5c290c8c3a410c1ef98c5a84ca99a75f845047086cdec848ebe5903b8d766c308379058d10590b5efa6b59023383e8db0d106493bae4249ca2fde809d8dbd3d5
SSDeep
24:9SgmnscXOlI0SfGvSABzsRAEfLHle7KgfrHNZsrtsKcU67H2s767t:9xCViIloSLHfc7K2OrjQ67t
TLSH
1C11B73D28E21139E1CB74BC5A3360AA584A0CC5424619CF123A564B482240B8A5DA4B
3 malicious · 3 files
ZIP197cfe025efa00e013c2d5a293361ed1T1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKDOC-XD8VD9.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
arc:zip>lnk~T1059.003~T1202~T1204.002
Shape
arc:zip>lnk
malicious
2 nodes
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential3 malicious · 3 files
ZIP197cfe025efa00e013c2d5a293361ed1T1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKDOC-XD8VD9.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
No malware configuration was found at this point.
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
197cfe025efa00e013c2d5a293361ed1 › DOC-XD8VD9.lnk
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with EssentialSign in or create a free account to view the matching YARA rules.
Create a free account