Malicious
27b9ec6b0d1b2f2862408d8b0940d123
ZIP Archive
MD5: 27b9ec6b0d1b2f2862408d8b0940d123
Size: 585 B
application/zip
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
ZIP archive
Size
585 B · 585 B
First seen
2026-08-03 11:27 · 2 months ago
Last seen
2026-08-03 11:27 · 2 months ago
Last analysis
2026-08-03 11:27 · 2 months ago
Hashes
MD5
27b9ec6b0d1b2f2862408d8b0940d123
Sha1
ee3e9f6ac88885695a63c489e3d3b8a4d64ebde9
Sha256
c732e6a2883258bd4315b7a542e530bb6398f4497f487a3d4b4c28ec7090a333
Sha384
dde371057799de316bb4394f6c05582c6d6fdd512b241a5e8cdeb68043a77fb8cb1fe085db5a8c90beb3eb0ba2a9d22d
Sha512
3e2df49a09541dbe87edcdb2d5c211e27b0f0f4f435ed94ad3f710785c2ab2b931470fa5a9915d98d87f9c341db02f8ed3066caa72f0b334b4bdef7630db26ee
SSDeep
12:5jm60InK8HulmjqvWJDfotykAtDqadmwwy31DmGCmEpsbbtBsZ0I0aoH:9CInKXlmjlJLoHad6G7EObbtBHIAH
TLSH
8FF0E1629415B55EC759CDF35D692A28D566C8594382AF2F833EB6080C99682BEC0684
3 malicious · 3 files
ZIP27b9ec6b0d1b2f2862408d8b0940d123T1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKDOC-KS614P.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
arc:zip>lnk~T1059.003~T1202~T1204.002
Shape
arc:zip>lnk
malicious
2 nodes
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential3 malicious · 3 files
ZIP27b9ec6b0d1b2f2862408d8b0940d123T1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKDOC-KS614P.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
No malware configuration was found at this point.
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
27b9ec6b0d1b2f2862408d8b0940d123 › DOC-KS614P.lnk
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with EssentialSign in or create a free account to view the matching YARA rules.
Create a free account