Malicious
8e0ec70e0c6b539368a325e9c83da927
ZIP Archive
MD5: 8e0ec70e0c6b539368a325e9c83da927
Size: 875 B
application/zip
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
ZIP archive
Size
875 B · 875 B
First seen
2026-08-04 08:24 · 2 months ago
Last seen
2026-08-04 08:24 · 2 months ago
Last analysis
2026-08-04 08:24 · 2 months ago
Hashes
MD5
8e0ec70e0c6b539368a325e9c83da927
Sha1
ab1ea53d2c3b3a8d95abfec27132cd5e7a2fcae4
Sha256
79572149b695684f5f4172493ba712054d165b4903ec544a98bdaa9f8a8885b0
Sha384
2154bf6016c3beb9627180cb526be54c461433b619cc87b62c329d164f662b4c2ff831e6962c7d6bd41d0161745c9467
Sha512
781a3b4d2467070b261ff2c7c89138740cc8052454b20e1fef406ee2ce2251e396395142ee6f96174a422f6d5019c7615e7c95e29f92f076c073155df4a50303
SSDeep
12:5j9xMQV1Ozy6eRcMCzqtNPi0Rr4bHijOPlBEcys7MLqH5vLj4E5zZMY/mJaodln:9/M21OO6e6gzicyR7MLshj4EZt/mXnn
TLSH
341112A31186595AED3C40FA44DE258066F906E9C43F27A61D1EE44A82C8149DE6169A
3 malicious · 3 files
ZIP8e0ec70e0c6b539368a325e9c83da927T1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKDOC-BTWVSL.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
arc:zip>lnk~T1059.003~T1202~T1204.002
Shape
arc:zip>lnk
malicious
2 nodes
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential3 malicious · 3 files
ZIP8e0ec70e0c6b539368a325e9c83da927T1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKDOC-BTWVSL.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
No malware configuration was found at this point.
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
8e0ec70e0c6b539368a325e9c83da927 › DOC-BTWVSL.lnk
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with EssentialSign in or create a free account to view the matching YARA rules.
Create a free account