Malicious
950ff0b0b8fc20cab2620ee39e06f702
ZIP Archive
MD5: 950ff0b0b8fc20cab2620ee39e06f702
Size: 923 B
application/zip
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
ZIP archive
Size
923 B · 923 B
First seen
2026-08-03 13:27 · 2 months ago
Last seen
2026-08-03 13:27 · 2 months ago
Last analysis
2026-08-03 13:27 · 2 months ago
Hashes
MD5
950ff0b0b8fc20cab2620ee39e06f702
Sha1
57fe82b370b6d4f2e8e3d43ba14f89c49a22f400
Sha256
52fd2e390de1bc3d335ca8429cbabba5ee3243fc7f3dffef5c0378a0716459c5
Sha384
592b6071c1e601efd6728bfa16fed4f57ef70c060c07d6d0900703b8fe405db6aa364f2dca0033591805e6f4736ddbdd
Sha512
71a669e451768515d6cb906c16fdc709c32065e3cf00958ed9d4ee73d04c07e29f174daf33687e8896a6938e5b04c032a2b0ad2df386afe2e1487d011f18c8a6
SSDeep
24:9u0gb15h2fWi3KaqmVl/VeoBvH+4IO9huYpL14g3n:9u5b15+KaBeoBf+2hpL14g3
TLSH
D31184F3CAC1CA36C85EA6306421610CB329A0054847772BF02CA2AB285A88ADECD819
3 malicious · 3 files
ZIP950ff0b0b8fc20cab2620ee39e06f702T1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKDOC-VPUR2G.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
arc:zip>lnk~T1059.003~T1202~T1204.002
Shape
arc:zip>lnk
malicious
2 nodes
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential3 malicious · 3 files
ZIP950ff0b0b8fc20cab2620ee39e06f702T1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKDOC-VPUR2G.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
No malware configuration was found at this point.
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
950ff0b0b8fc20cab2620ee39e06f702 › DOC-VPUR2G.lnk
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with EssentialSign in or create a free account to view the matching YARA rules.
Create a free account