Malicious
4668a9265bb682bbecc26a7b47c35985
ZIP Archive
MD5: 4668a9265bb682bbecc26a7b47c35985
Size: 2.26 KB
application/zip
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
ZIP archive
Size
2.26 KB · 2,262 B
First seen
2026-07-01 00:45 · 3 months ago
Last seen
2026-07-01 00:45 · 3 months ago
Last analysis
2026-07-02 00:31 · 3 months ago
Hashes
MD5
4668a9265bb682bbecc26a7b47c35985
Sha1
511ad6e38a8569e438c6f21ba873fb7a9d5d3949
Sha256
c2d5a838ebf3525e22fc008b859a8a5e9f1a2fa7bcd351489e7a1310da10d219
Sha384
0ce8e81cdf10530a0e10021ee506d09d479a3bde211ef6670c02b3d08da7aaf5be49fadf63dce3cb1007b2a899a292b1
Sha512
0f3a91b9f4ee33a1f069d0846e84cec97b80edafaeba1949f12f5a219f9de458d33160e2e05709bbacd869dcc15c68c75cca9e957eb4bafbc95b906bbb29548a
SSDeep
48:9jTIICA6GTpJMhkDeBpj7DgiHiR2IphG5G8aICxg6fZ5Gv:od2PMh77jiLphUG8aI0Lfmv
TLSH
E5410933455B706CC15D017F7091315C77FBDB27787EE017ABA590259482AC54B0FB8A
5 malicious · 5 files
ZIP4668a9265bb682bbecc26a7b47c35985T1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKFexoglobal_CRM_API_Credentials.pdf.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
LNKFexoglobal_CRM_API_Documentation.pdf.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
LNK: Command Execution
UNKNWOWNmalicious
conhoshuhuhuhuhuhuhuhuhuhuhu
LNK: Command Execution
UNKNWOWNmalicious
conhoshuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential5 malicious · 5 files
ZIP4668a9265bb682bbecc26a7b47c35985T1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKFexoglobal_CRM_API_Credentials.pdf.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
LNKFexoglobal_CRM_API_Documentation.pdf.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
No malware configuration was found at this point.
LNK: Command Execution
UNKNWOWNmalicious
conhoshuhuhuhuhuhuhuhuhuhuhu
4668a9265bb682bbecc26a7b47c35985 › Fexoglobal_CRM_API_Documentation.pdf.lnk
LNK: Command Execution
UNKNWOWNmalicious
conhoshuhuhuhuhuhuhuhuhuhuhu
4668a9265bb682bbecc26a7b47c35985 › Fexoglobal_CRM_API_Credentials.pdf.lnk
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with EssentialSign in or create a free account to view the matching YARA rules.
Create a free account