Malicious
9a0b6d2808c12272e1dbc43ab91e51a2
ZIP Archive
MD5: 9a0b6d2808c12272e1dbc43ab91e51a2
Size: 589 B
application/zip
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
ZIP archive
Size
589 B · 589 B
Hashes
MD5
9a0b6d2808c12272e1dbc43ab91e51a2
Sha1
2ee37b279159cbe5039f7ab60803a08825caf5be
Sha256
31fcd2ed4c498949faade80b42ebe47fefb655e55e7d4948defa5c416946d6b1
Sha384
d0a778b823af22ac8ec1399cd3da1d830191cef2be24110c88dd0676d4e2221db91bb687f6cab156db9628a8aa9d36a3
Sha512
56cdb16b5e27b5ace42e63a2e89ae73452a550f7628f330967cb5da528e847fa45e86a972ae6d537ac82ed41bdc8f80ef3fb1b2de8a69c4462a0f1506448b40c
SSDeep
12:5jjREn74ZgjXnYxPvGLgmmNWiDITZLCa3BUpmrxIHHca6aor:9OPM2MfNYZn34c1r
TLSH
7AF047B590DA3605DC0A607A2416194B85ABBF176397F46DA640ECC40D82562766C119
3 malicious · 3 files
ZIP9a0b6d2808c12272e1dbc43ab91e51a2T1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKDOC-YDN2OM.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
arc:zip>lnk~T1059.003~T1202~T1204.002
Shape
arc:zip>lnk
malicious
2 nodes
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential3 malicious · 3 files
ZIP9a0b6d2808c12272e1dbc43ab91e51a2T1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKDOC-YDN2OM.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
No malware configuration was found at this point.
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
9a0b6d2808c12272e1dbc43ab91e51a2 › DOC-YDN2OM.lnk
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with EssentialSign in or create a free account to view the matching YARA rules.
Create a free account