Malicious
807783c47ac5920ac96acb6689b73b97
ZIP Archive
MD5: 807783c47ac5920ac96acb6689b73b97
Size: 853 B
application/zip
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
ZIP archive
Size
853 B · 853 B
Hashes
MD5
807783c47ac5920ac96acb6689b73b97
Sha1
86dcc700174a1b9608137bd2ca28ebdf831d3fc5
Sha256
417214fc5eb9c283db1622c6124583937568cb85a1cd08b47b4acaec360d4ac4
Sha384
d9ae43e9077c3bf154d33567c1d8473229d15e01ae0738e51ed3bc52981d4fed8f916a39008992384f93155ed3aaa792
Sha512
1f0d753deeb3c7106357d98d52c85a931bdcce6ef7b14fdc0fb83c4705f6bd6ce83e056bbc5c1f95e8b3e44abd38073405487ab7574c94dbae89e142a6544a6e
SSDeep
12:5jhmgtKW3kaI324qQXRpW1nHOcRjSpdxJLOykWkjW88av/D1J0lEBBjuaoh:9//BI324rXoucZSlJLO8NaX7qEBB6h
TLSH
2801864F8225BE5BF19654B21436B7CBDC2FCD9661397066320873A91C471808B4A06A
3 malicious · 3 files
ZIP807783c47ac5920ac96acb6689b73b97T1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKDOC-28XSSA.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
arc:zip>lnk~T1059.003~T1202~T1204.002
Shape
arc:zip>lnk
malicious
2 nodes
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential3 malicious · 3 files
ZIP807783c47ac5920ac96acb6689b73b97T1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKDOC-28XSSA.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
No malware configuration was found at this point.
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
807783c47ac5920ac96acb6689b73b97 › DOC-28XSSA.lnk
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with EssentialSign in or create a free account to view the matching YARA rules.
Create a free account