Malicious
1e1bc403b699bf68823edc587d907c4f
ZIP Archive
MD5: 1e1bc403b699bf68823edc587d907c4f
Size: 580 B
application/zip
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
ZIP archive
Size
580 B · 580 B
First seen
2026-08-03 12:37 · 2 months ago
Last seen
2026-08-03 12:37 · 2 months ago
Last analysis
2026-08-03 12:37 · 2 months ago
Hashes
MD5
1e1bc403b699bf68823edc587d907c4f
Sha1
e0e250f4bd3caa667a69b61f34bd3e74c9bb2b62
Sha256
a33906d98e5f2d9efec52543a2204004d0792714fc53ea22211404c220b430ca
Sha384
d0ed87f8a85adf283478bbeba0492f71caf7f1fff5b501375f02ca8656a8e427f0ee79bb9bb1b4fb45f0eaf534bc3277
Sha512
3e91658d712ed0d4a4ae3f37083cc86bc9fc6ce9d33c3fab051fef25423b3d676ca92e0f4df29a7f5b35c74141b4d2ef86adafc6f91474c8a5af6f23ed3ecf95
SSDeep
12:5jk6vTE3K7wuSBpBAIw5aiduHHMRtF5bqXSjVhqGdrZviaoct:9toiwuSf+R5Td683OXGVhqyrhC0
TLSH
40F041F48F4FC618F44AC07C996F535D8032C0922C0B82181B34DBEA88F12F68B6D0B4
3 malicious · 3 files
ZIP1e1bc403b699bf68823edc587d907c4fT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKDOC-YEFINU.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
arc:zip>lnk~T1059.003~T1202~T1204.002
Shape
arc:zip>lnk
malicious
2 nodes
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential3 malicious · 3 files
ZIP1e1bc403b699bf68823edc587d907c4fT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKDOC-YEFINU.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
No malware configuration was found at this point.
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
1e1bc403b699bf68823edc587d907c4f › DOC-YEFINU.lnk
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with EssentialSign in or create a free account to view the matching YARA rules.
Create a free account