Malicious
327a1cfe2b21a0450158133ff2238b8c
ZIP Archive
MD5: 327a1cfe2b21a0450158133ff2238b8c
Size: 836 B
application/zip
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
ZIP archive
Size
836 B · 836 B
First seen
2026-08-03 13:27 · 2 months ago
Last seen
2026-08-03 13:27 · 2 months ago
Last analysis
2026-08-03 13:27 · 2 months ago
Hashes
MD5
327a1cfe2b21a0450158133ff2238b8c
Sha1
4fe3afaa9e815de79d293991b550162530bd1a8c
Sha256
5700fadc6eef13756c633d718194817224bfb736bc47768ad7ff44cef54c3cb1
Sha384
8a859ab00e40042e531d8b16b95daa956d599ac81efd3f8bf7f92e98adab643b44457cdc415a2435e8a614f68e9aaf0a
Sha512
d7a4df72c5e981d377a3de5b0365647bddbb72b48c57bd1fcece0c49be21d6c937d7efa1374f63824b4fee5f527c32756b673d455aa233ed925862132de85a47
SSDeep
24:9Y0tZWn45c2rghkE0z5KmIU8oDkq+Iq0Q5hyptHlWPaqEW0GZWUn:9YWEnYEVmb8oQPb3Y+aqEWtEUn
TLSH
5D01867626E32C2EEA1660FB9094484FAF361414B501160A30DC5C05FC64709CA68AB0
3 malicious · 3 files
ZIP327a1cfe2b21a0450158133ff2238b8cT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKDOC-827LRS.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
arc:zip>lnk~T1059.003~T1202~T1204.002
Shape
arc:zip>lnk
malicious
2 nodes
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential3 malicious · 3 files
ZIP327a1cfe2b21a0450158133ff2238b8cT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKDOC-827LRS.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
No malware configuration was found at this point.
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
327a1cfe2b21a0450158133ff2238b8c › DOC-827LRS.lnk
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with EssentialSign in or create a free account to view the matching YARA rules.
Create a free account