Malicious
2dc60c49e2db8eb39e386477c9f6c765
ZIP Archive
MD5: 2dc60c49e2db8eb39e386477c9f6c765
Size: 583 B
application/zip
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
ZIP archive
Size
583 B · 583 B
Hashes
MD5
2dc60c49e2db8eb39e386477c9f6c765
Sha1
6f58b4c80cfcd14f212c0592911ff3ba2c9d57aa
Sha256
6e610b392b5997f47a56f4c9a17463285314bcb28f3b650d67a02e7af30d57b9
Sha384
6d7d35ca1adc30666eeca75b7ad3878584465c96d6af6b44e97069f222ce97c394b03996b0c038dd85ab217d9a85735d
Sha512
c1a5af2dd637c60f5b1b4d8f2a6497a328efbb34ef2cf6d9c75ae2e6efe819c9f05e559b8c8ad57c01f8ac1066e09f31e18025880cbf1466b82230d4e41e38ca
SSDeep
12:5jAngagOAZhuHmDtl1+35+EJh9jom95spq+JXuH5V0FHOmjfRYaoBn:9AgPFUGWFX9E7JXuHLKumzRUB
TLSH
58F0E1E7C535E855D579C4FF782362316280A1D042CE6A9C1994C85F8CB40FF4959667
3 malicious · 3 files
ZIP2dc60c49e2db8eb39e386477c9f6c765T1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKDOC-7JQ84C.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
arc:zip>lnk~T1059.003~T1202~T1204.002
Shape
arc:zip>lnk
malicious
2 nodes
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential3 malicious · 3 files
ZIP2dc60c49e2db8eb39e386477c9f6c765T1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKDOC-7JQ84C.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
No malware configuration was found at this point.
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
2dc60c49e2db8eb39e386477c9f6c765 › DOC-7JQ84C.lnk
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with EssentialSign in or create a free account to view the matching YARA rules.
Create a free account