Malicious
5577b03cb3e36cd832f9e67c72af54f7
ZIP Archive
MD5: 5577b03cb3e36cd832f9e67c72af54f7
Size: 583 B
application/zip
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
ZIP archive
Size
583 B · 583 B
Hashes
MD5
5577b03cb3e36cd832f9e67c72af54f7
Sha1
5f5c6aa8af1a9df79c83115939298f60e1a58c79
Sha256
26fd3846cf3a695bd1838330acddd64e1d79873d2cfda4a7e8a46fb22844ca76
Sha384
960297dd1337b1dab05cee31c44b530550eb3b184c9b7e0ca496fd833dd5f680208ef49a746380308b85d8ff43d11b92
Sha512
75cbf2a3fa4a948cc02e2360b79ab691ae42ea4fd90e0cab7a31de1d8d7094c95b9b2df8e03b2b66683b4c425b82994868e64a818b8a12880f485fdc35b94c99
SSDeep
12:5jAtfIMn/x0G1YHGO5WYhI/x2Nsl44PgA3epXrzlV5cxy7QaoBn:9AfIM/xdYmgzIcNsjPZepFVyxYsB
TLSH
3BF096D34B011088C643C0FB51F15E392A2D5087150F06DA273EE6464A3B05436A0C16
3 malicious · 3 files
ZIP5577b03cb3e36cd832f9e67c72af54f7T1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKDOC-TSJZKV.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
arc:zip>lnk~T1059.003~T1202~T1204.002
Shape
arc:zip>lnk
malicious
2 nodes
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential3 malicious · 3 files
ZIP5577b03cb3e36cd832f9e67c72af54f7T1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKDOC-TSJZKV.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
No malware configuration was found at this point.
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
5577b03cb3e36cd832f9e67c72af54f7 › DOC-TSJZKV.lnk
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with EssentialSign in or create a free account to view the matching YARA rules.
Create a free account