Malicious
5e733ef00562fb1d63094d359b7b4a9c
ZIP Archive
MD5: 5e733ef00562fb1d63094d359b7b4a9c
Size: 582 B
application/zip
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
ZIP archive
Size
582 B · 582 B
Hashes
MD5
5e733ef00562fb1d63094d359b7b4a9c
Sha1
6f5c05d261c5c95a7819ac7397e52f84b1ff296f
Sha256
009c881ebe47bf6e8fca811a2c86d6a31731cf9ff8869fb864fe24eb6c6616aa
Sha384
4f293cb008b2f9056e31cc63ba8b4960254e370d46199a0ec6cb8de7616811499d282f37f1d93846ab51344d4ac3da83
Sha512
21325037e01c3c36865bdac40e7d06a95f3ff6d569d7f83d0c717538bc47abbe5915d59931221923db492d0c0baff5b47d0c813f7d04eaa418fcd2acb3928970
SSDeep
12:5j9UU++YLU3MWRLr511XjEVb10ggQxBF6eXc8Qihug769aoi:92U++mALr511XAXXWeXNPlui
TLSH
98F0E197434D428DCF6180B85D567372949100CD033B59B53A21B1452E697D26FC5C51
3 malicious · 3 files
ZIP5e733ef00562fb1d63094d359b7b4a9cT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKDOC-Y8LWU6.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
arc:zip>lnk~T1059.003~T1202~T1204.002
Shape
arc:zip>lnk
malicious
2 nodes
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential3 malicious · 3 files
ZIP5e733ef00562fb1d63094d359b7b4a9cT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKDOC-Y8LWU6.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
No malware configuration was found at this point.
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
5e733ef00562fb1d63094d359b7b4a9c › DOC-Y8LWU6.lnk
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with EssentialSign in or create a free account to view the matching YARA rules.
Create a free account