Malicious
25b7299d8de484b7d4993f3a53383b31
ZIP Archive
MD5: 25b7299d8de484b7d4993f3a53383b31
Size: 582 B
application/zip
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
ZIP archive
Size
582 B · 582 B
First seen
2026-08-03 13:03 · 2 months ago
Last seen
2026-08-03 13:03 · 2 months ago
Last analysis
2026-08-03 13:03 · 2 months ago
Hashes
MD5
25b7299d8de484b7d4993f3a53383b31
Sha1
f04a1607ecc08011b42019cd861799ebac74af5c
Sha256
3f6df8b14a0f893f8ddd3d11848128adb8a0dc8f900d02c51225465a3da1c20c
Sha384
43e153f51c60a2aed177dcd1d66e96b69044606f4cc77ab545a53d2166f41d38226641811f4afd49c7d7b2ce0bc3b9b9
Sha512
99af59a6763b27a91a79ab2ac2188c5245bbd5d5d0894b84b3b7a0c62ec34b65000ecae063c1a7b16bfcc46b26cda803878bef81c99ea0360db268a39377a320
SSDeep
12:5jy9lYP270U+lH8Ga48yb96kA2L5CbEj5gYxRpp0Kaoi:9y9lY+7y8Ga48CIvPKWYxR70Ki
TLSH
2EF096B30471B61FD21C84F7502017E4037311E9532E7E9B41E7FD89DC1A9597EA1D50
3 malicious · 3 files
ZIP25b7299d8de484b7d4993f3a53383b31T1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKDOC-87RCQO.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
arc:zip>lnk~T1059.003~T1202~T1204.002
Shape
arc:zip>lnk
malicious
2 nodes
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential3 malicious · 3 files
ZIP25b7299d8de484b7d4993f3a53383b31T1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKDOC-87RCQO.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
No malware configuration was found at this point.
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
25b7299d8de484b7d4993f3a53383b31 › DOC-87RCQO.lnk
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with EssentialSign in or create a free account to view the matching YARA rules.
Create a free account