Malicious
2d09c528a2343aad15324733162dd04f
ZIP Archive
MD5: 2d09c528a2343aad15324733162dd04f
Size: 592 B
application/zip
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
ZIP archive
Size
592 B · 592 B
First seen
2026-08-03 12:14 · 2 months ago
Last seen
2026-08-03 12:14 · 2 months ago
Last analysis
2026-08-03 12:14 · 2 months ago
Hashes
MD5
2d09c528a2343aad15324733162dd04f
Sha1
fc57b12c43b20f56abb854afc2c6ce008fb4c509
Sha256
94a70ff756919cd69d761c6775663612c0d1d1b05a75070f9077629f0c519312
Sha384
d823e907e9709ab3b344402b08c7577beebce570407e5a70763aa1fdaa673c920e3b113591b115992b3361ca91ae789e
Sha512
7baa418a972daa305c9399a122349a75bab7698dcc855cf0be7975ef8697e91dac78a458232d0ac7f3a0c1039e1582939849b29beac6e17b1d0e2a2a52515df5
SSDeep
12:5jbyvFne5bpI7Ht5vZ7z8W7y6IvGaXvnsv8b4iuj45N1xyuFliajt:9bgne59I7Ht55z8W7ArXv9bHN1xRHt
TLSH
AAF0963E4C096048E1EB51FCC6234B906211A3C5CF0AE1B754647D481C2B1EA1E7F18D
3 malicious · 3 files
ZIP2d09c528a2343aad15324733162dd04fT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKPDFDOC-O0PN6K.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
arc:zip>lnk~T1059.003~T1202~T1204.002
Shape
arc:zip>lnk
malicious
2 nodes
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential3 malicious · 3 files
ZIP2d09c528a2343aad15324733162dd04fT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKPDFDOC-O0PN6K.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
No malware configuration was found at this point.
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
2d09c528a2343aad15324733162dd04f › PDFDOC-O0PN6K.lnk
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with EssentialSign in or create a free account to view the matching YARA rules.
Create a free account