Malicious
2ab7d678baf1326a0778e9f9c5755977
ZIP Archive
MD5: 2ab7d678baf1326a0778e9f9c5755977
Size: 592 B
application/zip
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
ZIP archive
Size
592 B · 592 B
Hashes
MD5
2ab7d678baf1326a0778e9f9c5755977
Sha1
4d8780c135a2148c6433f0c598b74737f8ac94e7
Sha256
4d05a26eea1761d0a484678f13e8666beaf6adf6a63dda35b78039f930317c22
Sha384
6e3da886da025f99f7b61ddb40ec55ada895eb100a86f4f0f08de6111833889cec96df709df7f8dd52cf2417960e543a
Sha512
c1899bbab54a181badd0eddfc2a94552ec47ffa6e7c895d09d82821c3ab501703d6f18c18c4a3abee62d07f4bab78e48da843dbbe0f4d35a6b8d20e88a048f04
SSDeep
12:5j8ySNUIqugiBbEK2XmVmKSUk+fIL7lr+FYi36I7TyijfYo4kKdSuaoAt:9Z97+NSU7f2hr+uu6GTyUf/ZcA
TLSH
37F041B54D095202FC0EA3F18BBA61686500EE83A58B39CB41F2C023EA7C6492B40283
3 malicious · 3 files
ZIP2ab7d678baf1326a0778e9f9c5755977T1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKDOC-IXINB7.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
arc:zip>lnk~T1059.003~T1202~T1204.002
Shape
arc:zip>lnk
malicious
2 nodes
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential3 malicious · 3 files
ZIP2ab7d678baf1326a0778e9f9c5755977T1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKDOC-IXINB7.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
No malware configuration was found at this point.
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
2ab7d678baf1326a0778e9f9c5755977 › DOC-IXINB7.lnk
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with EssentialSign in or create a free account to view the matching YARA rules.
Create a free account