Malicious
9bf593f3a025568d20a190cfc3c488ff
ZIP Archive
MD5: 9bf593f3a025568d20a190cfc3c488ff
Size: 961 B
application/zip
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
ZIP archive
Size
961 B · 961 B
First seen
2026-08-03 13:33 · 2 months ago
Last seen
2026-08-03 13:33 · 2 months ago
Last analysis
2026-08-03 13:33 · 2 months ago
Hashes
MD5
9bf593f3a025568d20a190cfc3c488ff
Sha1
6300c15ed3c749df002c772f4e181458d9e2406f
Sha256
c4ae0fda0f576023070b358f78cb4b862185742d31abc0fb34e2eb46c8532f38
Sha384
f74bd3b435f0f9a70e88cf4e92350a61b86d03cbb1dd7c56f16d981eafc7731ac9c8fc6c23d4d722bd14ec81b4538d56
Sha512
25d7a7f3cca8a90d1c14c03e2b61e34a615d0df4a3a4013a9649587d7ac3f3976c259d24ad8473dc3d0849b0b8045e4d3fa76400279e61558152b0101369fd69
SSDeep
24:9JqW1PSm5zb3Xxp363MNpbjE7lzHSxFO61XKpNOIN:951PSm5zb3Xb63MvbjQf5xN
TLSH
F41198D7C009DD50C4C5A1B924DAD64D5C2A01B33563AE681AEBD50D0BB525EB342208
3 malicious · 3 files
ZIP9bf593f3a025568d20a190cfc3c488ffT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKDOC-1EEPNW.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
arc:zip>lnk~T1059.003~T1202~T1204.002
Shape
arc:zip>lnk
malicious
2 nodes
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential3 malicious · 3 files
ZIP9bf593f3a025568d20a190cfc3c488ffT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKDOC-1EEPNW.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
No malware configuration was found at this point.
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
9bf593f3a025568d20a190cfc3c488ff › DOC-1EEPNW.lnk
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with EssentialSign in or create a free account to view the matching YARA rules.
Create a free account