Malicious
3ef221cba6a3a0c981d529a3b114e75e
ZIP Archive
MD5: 3ef221cba6a3a0c981d529a3b114e75e
Size: 591 B
application/zip
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
ZIP archive
Size
591 B · 591 B
First seen
2026-08-03 11:26 · 2 months ago
Last seen
2026-08-03 11:26 · 2 months ago
Last analysis
2026-08-03 11:26 · 2 months ago
Hashes
MD5
3ef221cba6a3a0c981d529a3b114e75e
Sha1
c97cd4a39e944207426700ef43f642cc26edf628
Sha256
e44519776fa057fd1c6a6623021b3a73e24f10bfa64ea8dfc66497cbbdf8b0a8
Sha384
d267fbeca55afa8e41919450422fcb7109dba8fafed991287630787f76d0e8a5cb61a55d50126af86c97e79499e7b4fe
Sha512
03e24aeb8b08c95d435bbf86cb1eb0f22bdf2058ea7da3855f8535f7dd34b8e7dbd23275eea9f77a6b1a7f2d50bf2e5e8a5fec1662fc846a8ecdfa56f17b3aad
SSDeep
12:5jYuPavJKgr2cAcoAZVel2FQQgGJgBZr6YebXezUj5jZCtPPaox/:9r6JKgnJZTFbg9Tr6v6zUdjZO5x/
TLSH
1FF0416F81F9880FF690C1F6D0AB3370998080AA041A241BBB7DD8580348DF6A91F508
3 malicious · 3 files
ZIP3ef221cba6a3a0c981d529a3b114e75eT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKDOC-WCJPHP.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
arc:zip>lnk~T1059.003~T1202~T1204.002
Shape
arc:zip>lnk
malicious
2 nodes
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential3 malicious · 3 files
ZIP3ef221cba6a3a0c981d529a3b114e75eT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKDOC-WCJPHP.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
No malware configuration was found at this point.
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
3ef221cba6a3a0c981d529a3b114e75e › DOC-WCJPHP.lnk
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with EssentialSign in or create a free account to view the matching YARA rules.
Create a free account