Malicious
9917c9bef07f61ce1660ef8a08e440fc
ZIP Archive
MD5: 9917c9bef07f61ce1660ef8a08e440fc
Size: 584 B
application/zip
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
ZIP archive
Size
584 B · 584 B
First seen
2026-08-03 10:57 · 2 months ago
Last seen
2026-08-03 10:57 · 2 months ago
Last analysis
2026-08-03 10:57 · 2 months ago
Hashes
MD5
9917c9bef07f61ce1660ef8a08e440fc
Sha1
6a7bdf15a748f45f1d1d5e94a1f87bc4aa513707
Sha256
51c8a40ff85d43fc92ca012f66f9600d7d98b897686fcf1f790c14641aa8a515
Sha384
2f32ff8728a966495f4437f99822d010d59b37c5ce3b31103bfe0ec325eb4fe637c7226eb85cf47ea82cc83eba61921e
Sha512
05bb1ff07d534645423f5cd4557384c9de4d9e5a6c8275db1840a36a1d73d738a41da3ad17599fe77c204d5aeb993f114b7a67050cc5d64228d911344e29ef5c
SSDeep
12:5j9WEHoXWrWPOHT7NTBcUvdSgWvF+uUdHoHpjev+jS3vmWS+G/U7zWZZaoo:9EX+1v4Uvu+uuubjEvr3G/44o
TLSH
BCF0E11B43914E89D96FD0BC3B9376E5A47D9414E0AF6C2FA0AFDD8D26D0C18572C140
3 malicious · 3 files
ZIP9917c9bef07f61ce1660ef8a08e440fcT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKDOC-EXI0GD.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
arc:zip>lnk~T1059.003~T1202~T1204.002
Shape
arc:zip>lnk
malicious
2 nodes
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential3 malicious · 3 files
ZIP9917c9bef07f61ce1660ef8a08e440fcT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKDOC-EXI0GD.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
No malware configuration was found at this point.
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
9917c9bef07f61ce1660ef8a08e440fc › DOC-EXI0GD.lnk
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with EssentialSign in or create a free account to view the matching YARA rules.
Create a free account