Malicious
2cea1b2b392c273fdca0e0ba0c9ae683
ZIP Archive
MD5: 2cea1b2b392c273fdca0e0ba0c9ae683
Size: 884 B
application/zip
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
ZIP archive
Size
884 B · 884 B
Hashes
MD5
2cea1b2b392c273fdca0e0ba0c9ae683
Sha1
ac93c3fc9bb5795cc2a20435d42f94e69af06e79
Sha256
c683e3d86b45f32c4e1912f899219a4f1f701fc4e2a0a1e5227cb67c49596ae8
Sha384
c6e17a04916d1208231d9ba0f2d22e38212e86c200d734e01384ea540c1ef32f048fb1bda641b94b4441f785488b96f0
Sha512
2b473e44c68f2eda297660e17b9e54ba0244d01ab23b89fc9e16242a19fcb86746fada0c985c6d4f2c3589680b62b37540e6236e694781b187ac3ac05d3c1320
SSDeep
24:9EDIrROF0BL+1LxQvSpw5eFMsJPONQd5OYTVJRoayEC2dhnimVCl:9SIrROeS1WSwIMsJXl1o5lSZdVm
TLSH
911192C88A9E00EAC327E3B83864AC07D497862C039E6A4260EAA5021D97D8CAE86440
3 malicious · 3 files
ZIP2cea1b2b392c273fdca0e0ba0c9ae683T1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKDOC-PJOGDQ.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
arc:zip>lnk~T1059.003~T1202~T1204.002
Shape
arc:zip>lnk
malicious
2 nodes
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential3 malicious · 3 files
ZIP2cea1b2b392c273fdca0e0ba0c9ae683T1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKDOC-PJOGDQ.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
No malware configuration was found at this point.
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
2cea1b2b392c273fdca0e0ba0c9ae683 › DOC-PJOGDQ.lnk
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with EssentialSign in or create a free account to view the matching YARA rules.
Create a free account