Malicious
1ca14d513e7556517c2313cfe38e84dc
ZIP Archive
MD5: 1ca14d513e7556517c2313cfe38e84dc
Size: 588 B
application/zip
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
ZIP archive
Size
588 B · 588 B
Hashes
MD5
1ca14d513e7556517c2313cfe38e84dc
Sha1
d6ac6abf5301da59baa2e1d7b4bc2c6bca847b38
Sha256
6f7d7349e7cd262fee81df1917a91ed76a96f273bebeacb29fcfff9e0fbb843a
Sha384
ee6cebfdd66ca9ef6be2ac9b8b853c9edd47b4459c75448b8fa409b3459b43082e7e7772b8dcb3c1d1b667da5a0c3b98
Sha512
6c6e72df21d2e3c2223558e08dc3c1de9507338bf937477eb19020c120a258d1c910e9f1aea8d586900ca13d6c8169b9d3715298d56745813d9b57be451342af
SSDeep
12:5j6pSiIqL0Gsltz/A9M8IUYH76FuA7vxOjEffcqSbiaoM:9YSi9L6Dz/ArJYH7x2vFfhSeM
TLSH
ECF0E17962088816D82261BC0C979AF105C580C4A60EB29F0FE0F44D64821F21B107FD
3 malicious · 3 files
ZIP1ca14d513e7556517c2313cfe38e84dcT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKDOC-OF1K23.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
arc:zip>lnk~T1059.003~T1202~T1204.002
Shape
arc:zip>lnk
malicious
2 nodes
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential3 malicious · 3 files
ZIP1ca14d513e7556517c2313cfe38e84dcT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKDOC-OF1K23.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
No malware configuration was found at this point.
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
1ca14d513e7556517c2313cfe38e84dc › DOC-OF1K23.lnk
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with EssentialSign in or create a free account to view the matching YARA rules.
Create a free account