Malicious
5398a226ce4b5eed76a8530857950201
ZIP Archive
MD5: 5398a226ce4b5eed76a8530857950201
Size: 925 B
application/zip
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
ZIP archive
Size
925 B · 925 B
Hashes
MD5
5398a226ce4b5eed76a8530857950201
Sha1
9f07818049286beb47ec4d8da9a5edeb2e12142e
Sha256
75c257e91f0c9dd89612b18be77dad03127212067a6607aff7c030be096b3e3b
Sha384
8693770c86c558ee0d812eb59117910a495ca5ea41a44d2db5479e243f6777e4c3ec331358d6b275537eb92f7619caa9
Sha512
dca76cd8a85d164581526f3c1b06b711f397754976498dae2e07423cfebf154da7e313f8811656c60cd25ca9d95673be9687f99e09e65d4eafa9cb1f717e473f
SSDeep
24:9dQU/wJp/ukd1ugYEMXk5H2xNL13xKlMomcAXMjbcQcNC5:9mW6pbu9w5Ch3zomPMcQcs5
TLSH
3F116733433D0841DA59A57051F43D990921F5100019FC6B5A79FD9E9F174B03901EC3
3 malicious · 3 files
ZIP5398a226ce4b5eed76a8530857950201T1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKDOC-5FQFK1.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
arc:zip>lnk~T1059.003~T1202~T1204.002
Shape
arc:zip>lnk
malicious
2 nodes
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential3 malicious · 3 files
ZIP5398a226ce4b5eed76a8530857950201T1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKDOC-5FQFK1.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
No malware configuration was found at this point.
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
5398a226ce4b5eed76a8530857950201 › DOC-5FQFK1.lnk
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with EssentialSign in or create a free account to view the matching YARA rules.
Create a free account