Malicious
9cbe4f32316e53723b34d765ae3674ea
ZIP Archive
MD5: 9cbe4f32316e53723b34d765ae3674ea
Size: 855 B
application/zip
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
ZIP archive
Size
855 B · 855 B
First seen
2026-08-03 13:38 · 2 months ago
Last seen
2026-08-03 13:38 · 2 months ago
Last analysis
2026-08-03 13:39 · 2 months ago
Hashes
MD5
9cbe4f32316e53723b34d765ae3674ea
Sha1
a33d59aff48ac74cfdb2e28055fc0c989656f1c5
Sha256
ceb4ea2918e9b643bc9cab3ba6c30815ff877793062aa583042af220b44ca523
Sha384
a786f9c4e9a424148edc9255e31c1e8e9d46e171ef156f7d2bf467ad0d363ce3272a9da35992c85072408774eed9f723
Sha512
220a65d04af1112ee2ddcdd84c8e4ca26963c1e0edc4c7204cd706eff877dbd85e859eb6d1f33c109cb5a7158a5e6a676c9c0914e609774a556b28a62a83e7eb
SSDeep
12:5jGNZ65vxnG6EMAJd3k9epUo60gXfk6veBgZeGMNvdVx0cJXY9D69evLxXDz4Nk6:9HUf3kQ76BMBDjbn0cJI/9XPlCT
TLSH
3A1186779668E985CBDF4736752B2548C63E42419409D10F0FAFE6434605178DB4C676
3 malicious · 3 files
ZIP9cbe4f32316e53723b34d765ae3674eaT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKDOC-1G6DRU.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
arc:zip>lnk~T1059.003~T1202~T1204.002
Shape
arc:zip>lnk
malicious
2 nodes
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential3 malicious · 3 files
ZIP9cbe4f32316e53723b34d765ae3674eaT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKDOC-1G6DRU.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
No malware configuration was found at this point.
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
9cbe4f32316e53723b34d765ae3674ea › DOC-1G6DRU.lnk
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with EssentialSign in or create a free account to view the matching YARA rules.
Create a free account