Malicious
20fa3113ac9d081ce7a99ff4a6f973a0
ZIP Archive
MD5: 20fa3113ac9d081ce7a99ff4a6f973a0
Size: 35.34 KB
application/zip
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
ZIP archive
Size
35.34 KB · 35,344 B
First seen
2026-09-22 12:45 · one month ago
Last seen
2026-09-22 12:45 · one month ago
Last analysis
2026-09-22 12:45 · one month ago
Hashes
MD5
20fa3113ac9d081ce7a99ff4a6f973a0
Sha1
9a2ed846b7f9925d661fd3b8e9d418854856905e
Sha256
8b1a076ea921f55f82c60e195f5d3ee91c49627aff64d7317db4660c0ae6542c
Sha384
3cef3dd26d24eb107d4b15cb8f3fbed8fb49393859aac42b7d9d393c86fba7b8242f3919f8b7b4fa1789c33ea4547b14
Sha512
d2f1c9ae5a6dce5a3b432dfd67feb591f869b5158f5782c522e808ed61ca515f13bd07acdf07f4d3daae4ad2f04cc3b63d00e30ae4035a2b3441fd9edabe10fd
SSDeep
768:3d1j7kHETc8gqZxXFHz4b46RC9PL/Ul+XzT8Z0mJc:6f8gY1Nz4cJ/Ulc38I
TLSH
1BF2C02656FC245BF374B0C381B67A872FD2680E93639952BD4BB04245B64B4B2FDC1E
3 malicious · 20 files
ZIP20fa3113ac9d081ce7a99ff4a6f973a0T1059.003 · T1204.002 · T1202: Indirect Command Execution
BINNABIDKA_GOTTWALD_2001
DOCCesko_Ochrana_Udaju.docx
XML[Content_Types].xml
BIN_rels
XML.rels
BINword
XMLdocument.xml
BIN_rels
XMLdocument.xml.rels
XMLfontTable.xml
XMLnumbering.xml
XMLsettings.xml
XMLstyles.xml
BINtheme
XMLtheme1.xml
XMLwebSettings.xml
BINdocProps
XMLapp.xml
XMLcore.xml
DOCPozvani_2025_EDEKA.docx
BINword
XMLdocument.xml
XMLnumbering.xml
XMLstyles.xml
LNKOfferta_K_Gottwald_20-01-26.docx.lnkT1059.003 · T1204.002 · T1202: Indirect Command Execution
BIN[Lnk Summary]
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
Structural branches: 5
STICH kept: 1secondary ignored: 4
oox:metadata
1oox:style
1oox:theme
1xml
1Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
arc:zip>lnk~T1059.003~T1202~T1204.002~T1218
Shape
arc:zip>lnk
malicious
2 nodes
3 malicious · 20 files
ZIP20fa3113ac9d081ce7a99ff4a6f973a0T1059.003 · T1204.002 · T1202: Indirect Command Execution
BINNABIDKA_GOTTWALD_2001
DOCCesko_Ochrana_Udaju.docx
DOCPozvani_2025_EDEKA.docx
LNKOfferta_K_Gottwald_20-01-26.docx.lnkT1059.003 · T1204.002 · T1202: Indirect Command Execution
BIN[Lnk Summary]
No malware configuration was found at this point.
Sign in or create a free account to view the matching YARA rules.
Create a free account