Malicious
797547991af8375f420d1c0b4a9a6a31
ZIP Archive
MD5: 797547991af8375f420d1c0b4a9a6a31
Size: 583 B
application/zip
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
ZIP archive
Size
583 B · 583 B
Hashes
MD5
797547991af8375f420d1c0b4a9a6a31
Sha1
eadf7df015dea5b66fa5d17b5339039994670b5a
Sha256
0c50cc1bbf03016d7cbc0e7bc214f1208deb98d9d7473675fc6afac9ecde2b50
Sha384
608ba5078b2945b4d21540b115f012e5a061b9fe3be3a540658b6642daf53d32ce501d4823505699ac52c61a6843f25f
Sha512
9817b9776d3c7d9250f08292bda69a7f0e90b5ef988edca3559a0b4d421a0a8c162399e81814b443376bdef8c248910a5a6af64acc6504eb2225243df046ef2c
SSDeep
12:5jtD0gQW6SKuHM3J8hKSjvPViK1DIO+Yws2pw4rwmD0PaoBn:9t2FuHM3JHEcYFb4Um2B
TLSH
4EF0E1D3EBB15C58D027E2F32502B4A7C788D099864571D2A4A6E58F98705435919948
3 malicious · 3 files
ZIP797547991af8375f420d1c0b4a9a6a31T1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKDOC-EWXGZQ.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
arc:zip>lnk~T1059.003~T1202~T1204.002
Shape
arc:zip>lnk
malicious
2 nodes
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential3 malicious · 3 files
ZIP797547991af8375f420d1c0b4a9a6a31T1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKDOC-EWXGZQ.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
No malware configuration was found at this point.
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
797547991af8375f420d1c0b4a9a6a31 › DOC-EWXGZQ.lnk
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with EssentialSign in or create a free account to view the matching YARA rules.
Create a free account