Malicious
2920a9bab16c3eb4630e34b1c58b5b75
ZIP Archive
MD5: 2920a9bab16c3eb4630e34b1c58b5b75
Size: 577 B
application/zip
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
ZIP archive
Size
577 B · 577 B
First seen
2026-08-03 10:57 · 2 months ago
Last seen
2026-08-03 10:57 · 2 months ago
Last analysis
2026-08-03 10:57 · 2 months ago
Hashes
MD5
2920a9bab16c3eb4630e34b1c58b5b75
Sha1
2e7a3d94f6ba58d4584865cf11cda937fdb67703
Sha256
2ab05e11b03ace9f124283d58aea1d807dca8e7b51f61a2c76f6aa919e23a370
Sha384
74ef63dd926299033e8f311b878e6dec6229843dda529141b2baeab66ae857a4beb5647af0071d7f2030b9eab2184372
Sha512
1bc466085060e73763fb4a53f4af41ea9571a22a92a7d609d2c76f0a5efdccae5b99b8d11266ae83cbf9037024270e2ea26f03570e9d092656449ef941ca36db
SSDeep
12:5jUFtWlK9GsybqGeV+L5x2a1/fx9Bcnn2o2pCxy8wvxi2HipWDBc+FtPlPaov:9Uh9ZybHblx9Cnnp2y6i4DBc+Xv
TLSH
01F0EBA48302867DC510A2FBC16727254C60075603F33AC5232EB71ED9320ED8F1E4A9
3 malicious · 3 files
ZIP2920a9bab16c3eb4630e34b1c58b5b75T1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKDOC-J8LLDY.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
arc:zip>lnk~T1059.003~T1202~T1204.002
Shape
arc:zip>lnk
malicious
2 nodes
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential3 malicious · 3 files
ZIP2920a9bab16c3eb4630e34b1c58b5b75T1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKDOC-J8LLDY.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
No malware configuration was found at this point.
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
2920a9bab16c3eb4630e34b1c58b5b75 › DOC-J8LLDY.lnk
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with EssentialSign in or create a free account to view the matching YARA rules.
Create a free account