Malicious
20e096c9ea982457e1ac4a30bf7b99a7
ZIP Archive
MD5: 20e096c9ea982457e1ac4a30bf7b99a7
Size: 893 B
application/zip
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
ZIP archive
Size
893 B · 893 B
First seen
2026-08-03 10:52 · 2 months ago
Last seen
2026-08-03 10:52 · 2 months ago
Last analysis
2026-08-03 10:52 · 2 months ago
Hashes
MD5
20e096c9ea982457e1ac4a30bf7b99a7
Sha1
82ec3655f5f2c484e84180e71a627da0fd280d7b
Sha256
222089ec520c4b5c3b70d1d2f4a7dc9dc4f911385f9fb41f30f22d1c7b1ec6bf
Sha384
1249b149f396058a2bd149183d1de112d029109917b6b7ed553bdf48504b90d0a8c8a09b235c6cd76bed395bbb07e1c8
Sha512
ed181e0fc8f97ac0e0ad5c43c2cfbf2c0d3039c167047b483237b21b86dfaa14fa43b575f8f12bf713e370544a2d4375e60e83a64f9b2146cad526a19dad6897
SSDeep
24:9aR/+OIL83UR4FGUiKyCI2Wbo24hrYnGyxGdofYhVTjcRMZ:9aR2no3CyiKq2Y14pyGtofYbvcRMZ
TLSH
171167B74540E416F151C434AA7B5F4DEE0F021410437029E9E9EC652956B203F5F090
3 malicious · 3 files
ZIP20e096c9ea982457e1ac4a30bf7b99a7T1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKDOC-BUKYLP.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
arc:zip>lnk~T1059.003~T1202~T1204.002
Shape
arc:zip>lnk
malicious
2 nodes
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential3 malicious · 3 files
ZIP20e096c9ea982457e1ac4a30bf7b99a7T1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKDOC-BUKYLP.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
No malware configuration was found at this point.
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
20e096c9ea982457e1ac4a30bf7b99a7 › DOC-BUKYLP.lnk
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with EssentialSign in or create a free account to view the matching YARA rules.
Create a free account