Malicious
9db6aab22b7bd14f4db11326f94ce4d9
ZIP Archive
MD5: 9db6aab22b7bd14f4db11326f94ce4d9
Size: 581 B
application/zip
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
ZIP archive
Size
581 B · 581 B
First seen
2026-08-03 13:04 · 2 months ago
Last seen
2026-08-03 13:04 · 2 months ago
Last analysis
2026-08-03 13:04 · 2 months ago
Hashes
MD5
9db6aab22b7bd14f4db11326f94ce4d9
Sha1
87f3cae7750a43e41dbf9589298907b44bfaa772
Sha256
a8054a22f57ce838c93f53516d4cc62286df26e3c6bbea3c75b2886f6f8fb691
Sha384
5b980f02f1cf051be92faf8c65441a8ed5eaa922af0be68c61a00b8abfb60e25c853baadb3a31083ecc6fd346df502a6
Sha512
b92ecdc126a3e22ffc69301a7b00a1ce06b320fa6ae6e15cb293068a59416339f01185b7ced8b0e28f3dc7f2d2018a0806626e7fe3fc7b8afe30961c1d5109eb
SSDeep
12:5jv870KYvaJ/3eXmLsv7f5u4uM8ja6qpxEJWLdvMtkZNdnZ8Y0PaoT:9CxYkW+svEU6SauDdv6T
TLSH
D7F0E1BB5D93C89ADD75E5B491F063240D14D4046E773E210A31DC209DD9568A5C68B3
3 malicious · 3 files
ZIP9db6aab22b7bd14f4db11326f94ce4d9T1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKDOC-NMEZD0.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
arc:zip>lnk~T1059.003~T1202~T1204.002
Shape
arc:zip>lnk
malicious
2 nodes
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential3 malicious · 3 files
ZIP9db6aab22b7bd14f4db11326f94ce4d9T1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKDOC-NMEZD0.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
No malware configuration was found at this point.
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
9db6aab22b7bd14f4db11326f94ce4d9 › DOC-NMEZD0.lnk
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with EssentialSign in or create a free account to view the matching YARA rules.
Create a free account