Malicious
2fe2b12c7218ff8a44f5f8f7459180e9
ZIP Archive
MD5: 2fe2b12c7218ff8a44f5f8f7459180e9
Size: 590 B
application/zip
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
ZIP archive
Size
590 B · 590 B
First seen
2026-08-03 10:49 · 2 months ago
Last seen
2026-08-03 10:49 · 2 months ago
Last analysis
2026-08-03 10:49 · 2 months ago
Hashes
MD5
2fe2b12c7218ff8a44f5f8f7459180e9
Sha1
067c466e183747031adb355e6b10cd635ed85a3c
Sha256
092bafec1387453147847c2cd47cdd8a8236310bf1c0863414c39c8c93c1cfc5
Sha384
d08b5b78170dd3b983d987b9530937716166001b1f63d695e5ae3cce53cf339684e8a4d46496e3ca7fdc98db4eeb26ba
Sha512
5c55cda95c1f0cc24d90ed944a0ca911ab9d906c73e9ed130906f5d8d50530fddee8b89b8d679c1b5b7c628f637121afa0f06a0400a60b6cdb9649bc395e831d
SSDeep
12:5jEQbQI7Ef7OFTpXmHrr1/szIH6loPXhGwEwGr4H1+4IBKQbbao6:95bQFfCFNWHrr1/szIHRc9r81+4qLbt6
TLSH
8EF0E139D52BEC25C10B64B968567F55302199AC114B56529D34DD625E78306CF33B50
3 malicious · 3 files
ZIP2fe2b12c7218ff8a44f5f8f7459180e9T1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKDOC-9TBXQB.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
arc:zip>lnk~T1059.003~T1202~T1204.002
Shape
arc:zip>lnk
malicious
2 nodes
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential3 malicious · 3 files
ZIP2fe2b12c7218ff8a44f5f8f7459180e9T1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKDOC-9TBXQB.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
No malware configuration was found at this point.
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
2fe2b12c7218ff8a44f5f8f7459180e9 › DOC-9TBXQB.lnk
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with EssentialSign in or create a free account to view the matching YARA rules.
Create a free account