Malicious
26f8f0516618faea00da5506bbe814c5
ZIP Archive
MD5: 26f8f0516618faea00da5506bbe814c5
Size: 584 B
application/zip
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
ZIP archive
Size
584 B · 584 B
Hashes
MD5
26f8f0516618faea00da5506bbe814c5
Sha1
f590afa9790aa32ed21ed2fbd8abbc5655323fe3
Sha256
84d9156b2978f0fc09b0dd983dea5ec6a9f02cf1c4bdbcdabe0436595cfc5f8f
Sha384
6c6e20f62bade12c9606345653636e506abaa7a76b1405ed83f4886940f89c7675c4b8cc634b5b36453c17c77492a7c0
Sha512
55a01e903153aa11cc056c09f7f5548854162c7adfb5341d55dba58c7404bcceb19165be7b71c8bf5cf33cb9f0e184358d3cab7ac88a937ca8bf9f0abd8a468e
SSDeep
12:5jXck7YvTKK89K6l0fEqOABtxCiGbVjxGdV1Rz7qVmlxvjuwJLamBJc1saoo:9XcEY2KkK6nAYiG5cz1RzeVmpUmBJcWo
TLSH
81F0E1230623FD65CC9DC4BD5C0462F4632B454A5003258AAD35EB7E9C7CAB99D8A0A9
3 malicious · 3 files
ZIP26f8f0516618faea00da5506bbe814c5T1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKDOC-L46JFT.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
arc:zip>lnk~T1059.003~T1202~T1204.002
Shape
arc:zip>lnk
malicious
2 nodes
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential3 malicious · 3 files
ZIP26f8f0516618faea00da5506bbe814c5T1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKDOC-L46JFT.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
No malware configuration was found at this point.
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
26f8f0516618faea00da5506bbe814c5 › DOC-L46JFT.lnk
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with EssentialSign in or create a free account to view the matching YARA rules.
Create a free account