Malicious
1ec91dd0c60a3f16ce7c4f63d2cb8212
ZIP Archive
MD5: 1ec91dd0c60a3f16ce7c4f63d2cb8212
Size: 587 B
application/zip
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
ZIP archive
Size
587 B · 587 B
First seen
2026-08-03 10:31 · 2 months ago
Last seen
2026-08-03 10:31 · 2 months ago
Last analysis
2026-08-03 10:31 · 2 months ago
Hashes
MD5
1ec91dd0c60a3f16ce7c4f63d2cb8212
Sha1
49e54cf75af15cde4de659db5a4cbcce5008e39f
Sha256
e7b327a2d4ce632eef12f59c27eb5d1ff76c8f62a56fbc192706e22f2627ca49
Sha384
8e0344bc6cf8fb04a18e41544e77c66165f2363b28243cdf1ce51bd3fa9626954225b14819fad953c53835d65e4c5b0d
Sha512
86cbf03eeded7045e2ba46ec8dd62eac7759149c55837e89125f0db431a22a3865f5eb79d5a08fe5c38d2e7dfad0469ea2312e6c6e88bc3f60d8ab6476f79955
SSDeep
12:5jBRPkd6J7xp6afCdgDcdRL02nnK8X9W41PXoBhpFN/ETS2Y+qnSgaol:9BRcdOxtfydRL02nvW4pyv/EW2Y+qnSW
TLSH
1DF04127254118CCF10D1F3BD81F227D80B76327068B22A5793CEA0F09211C88BDA9D0
3 malicious · 3 files
ZIP1ec91dd0c60a3f16ce7c4f63d2cb8212T1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKDOC-GKSQSF.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
arc:zip>lnk~T1059.003~T1202~T1204.002
Shape
arc:zip>lnk
malicious
2 nodes
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential3 malicious · 3 files
ZIP1ec91dd0c60a3f16ce7c4f63d2cb8212T1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKDOC-GKSQSF.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
No malware configuration was found at this point.
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
1ec91dd0c60a3f16ce7c4f63d2cb8212 › DOC-GKSQSF.lnk
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with EssentialSign in or create a free account to view the matching YARA rules.
Create a free account