Malicious
3c47105fafc762cde5708f6dce2b2892
ZIP Archive
MD5: 3c47105fafc762cde5708f6dce2b2892
Size: 579 B
application/zip
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
ZIP archive
Size
579 B · 579 B
Hashes
MD5
3c47105fafc762cde5708f6dce2b2892
Sha1
42e410f5a45e6abeb820d2e50b29751ae45d8eba
Sha256
9783b71c0154558c1b4c1a7d7f44a91bd3cb9f3c37aaf02cb5857f10c7f38db5
Sha384
160cfab1fdc61f5243dadce6759afbf650040affd328f7b19bf020cb0beedbae32408923dd1e72d56b4300de10ed817b
Sha512
e6cce236e75ff0b27d4685b53b939729069d832d98c59948ccd046c55a1f1faea1d793672ba50c3c78bd7f2e795d750bedcef2a0b93813ab6712095fcb67902f
SSDeep
12:5jYgm9DySgVU6GAUE2vdHLSwmJTHRmbZ54ryGr41GJ078ae3mIJaoF/:9YcSg+TAuvdHlmxRmbu6QaePXN
TLSH
EAF041E6926815D8C111F53E607964034EF6F64076ED432018B2EC5C3CA0854278CA11
3 malicious · 3 files
ZIP3c47105fafc762cde5708f6dce2b2892T1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKDOC-CFSXBJ.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
arc:zip>lnk~T1059.003~T1202~T1204.002
Shape
arc:zip>lnk
malicious
2 nodes
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential3 malicious · 3 files
ZIP3c47105fafc762cde5708f6dce2b2892T1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKDOC-CFSXBJ.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
No malware configuration was found at this point.
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
3c47105fafc762cde5708f6dce2b2892 › DOC-CFSXBJ.lnk
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with EssentialSign in or create a free account to view the matching YARA rules.
Create a free account