Malicious
ZIP Archive
MD5: 2e2b49d58e4a4d10a018ebafc8a9f265
Size: 1.01 KB
application/zip
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
ZIP archive
Size
1.01 KB · 1,011 B
First seen
2026-08-03 13:37 · 2 months ago
Last seen
2026-08-03 13:37 · 2 months ago
Last analysis
2026-08-03 13:37 · 2 months ago
Hashes
MD5
2e2b49d58e4a4d10a018ebafc8a9f265
Sha1
2ca00386c328ca0c665e15d1e5e509cba8d117c3
Sha256
1602117f9151a1905ac0e7419b0e2cba4581bcb25492b79f661a8929f6c557a1
Sha384
e0acadf309574a71e8591b60a7fa8e7cc77077e7af0dd454fc4502ae3dc34a793b9443698192b61c400736ebb7d23158
Sha512
79410275872f504476f3213065de7246ee4ea361d24a542fdd439dca17ce1bd034aaaddfbe7f9d9c34091a4e56096d4f6f8767e281db078228e37b9ea47fb040
SSDeep
24:9D9lxfFtOFDJQdxXrr0CfvL+7m4r4XFyV+KAnparMx4ad6V9lnn/:9D9viivLva7mX4ypaYqaUV9p/
TLSH
F211C851B0A8905DDA0FD4318C28875F1E2E01CA6B4B3DA2BF2F4805B581C6D5A07AD2
3 malicious · 3 files
ZIP2e2b49d58e4a4d10a018ebafc8a9f265T1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKDOC-2SRX9Q.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
arc:zip>lnk~T1059.003~T1202~T1204.002
Shape
arc:zip>lnk
malicious
2 nodes
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential