Malicious
1c28acf69c38fc161d33b573be6374a9
ZIP Archive
MD5: 1c28acf69c38fc161d33b573be6374a9
Size: 896 B
application/zip
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
ZIP archive
Size
896 B · 896 B
Hashes
MD5
1c28acf69c38fc161d33b573be6374a9
Sha1
dccc63d360425d822b3a26783048e2d2eeca496e
Sha256
fb9627f794bf17097d549801bdc088f13517aa2f0cd9c1e4162cb565fa87c7d0
Sha384
34248d284bfc4867e13d0c5a87c3610c7fc5bd9b6e8ff5a37a04f06c318b5ca0e8d82bf8bb2cc882a52d86eb66cd8618
Sha512
9a043a0d186bedc64e54a3c9f090f9c28679de2bcd29f740db0cacc1abb1ab5fd5d1c955fea5c51ac5d3eb98c2e6a7d386f4be10db22981ca0292c312d580f6c
SSDeep
24:9xNk/lvbpSmlFbPMAXNJSfUxPj2a/U8iBf8dpXEkEYUTeagHUWCGl:9xNCkmv0iJSfQFcDf8mYUCxHUvy
TLSH
9411EBD302E7B539DE04C0FD4B7237CB0A6C0C0C0006274F9844FAD6144A5D4B7B00E2
3 malicious · 3 files
ZIP1c28acf69c38fc161d33b573be6374a9T1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKDOC-2UGCTI.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
arc:zip>lnk~T1059.003~T1202~T1204.002
Shape
arc:zip>lnk
malicious
2 nodes
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential3 malicious · 3 files
ZIP1c28acf69c38fc161d33b573be6374a9T1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKDOC-2UGCTI.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
No malware configuration was found at this point.
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
1c28acf69c38fc161d33b573be6374a9 › DOC-2UGCTI.lnk
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with EssentialSign in or create a free account to view the matching YARA rules.
Create a free account