Malicious
80951c7a1b6694288d18bf41d389b0ed
ZIP Archive
MD5: 80951c7a1b6694288d18bf41d389b0ed
Size: 589 B
application/zip
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
ZIP archive
Size
589 B · 589 B
First seen
2026-08-03 11:20 · 2 months ago
Last seen
2026-08-03 11:20 · 2 months ago
Last analysis
2026-08-03 11:20 · 2 months ago
Hashes
MD5
80951c7a1b6694288d18bf41d389b0ed
Sha1
7029303a5a11b0e899e4bf4ac9d9ad2c956f693f
Sha256
ca9b57cd066e0a962a565953de9d17c5ecd386d2a564e3197c3d1a1e2c19c883
Sha384
a695ea7b5cf65b2af4d9c67520c8040de16c79a77e028828b526079b0255bf2842fe86f3ae6ea902c58fa4d349e36659
Sha512
79bdb00c18f7a1baf0a59b80fb91221d7817388ea3893f2fabb2155d0f3ee5d26ceb9924d3c3496e7ce4a58720f2e5f7cdf938695930b1414bb3d869daa63375
SSDeep
12:5jIQD212oyDNf+Vp2pSpNoPeeuWZV9sb5Ui5On1hhvAq+oepL9qQr7GQ2Laor:9IQDpVNfLY/UenWZV9eY13Nkq6GQ2dr
TLSH
6EF0E1EE523F3538D20C707F81B5056596AA24D641ED526AC354F6D40E9C68B2A64484
3 malicious · 3 files
ZIP80951c7a1b6694288d18bf41d389b0edT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKDOC-FUAY7R.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
arc:zip>lnk~T1059.003~T1202~T1204.002
Shape
arc:zip>lnk
malicious
2 nodes
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential3 malicious · 3 files
ZIP80951c7a1b6694288d18bf41d389b0edT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKDOC-FUAY7R.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
No malware configuration was found at this point.
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
80951c7a1b6694288d18bf41d389b0ed › DOC-FUAY7R.lnk
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with EssentialSign in or create a free account to view the matching YARA rules.
Create a free account