Malicious
9ec90d7b376e4263677209927494a81d
ZIP Archive
MD5: 9ec90d7b376e4263677209927494a81d
Size: 862 B
application/zip
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
ZIP archive
Size
862 B · 862 B
First seen
2026-08-04 08:25 · 2 months ago
Last seen
2026-08-04 08:25 · 2 months ago
Last analysis
2026-08-04 08:25 · 2 months ago
Hashes
MD5
9ec90d7b376e4263677209927494a81d
Sha1
12f895a3ee4ca9588b45d1e88620be8a6e6a5017
Sha256
2da6e0ee1963b1c153b670736e95d466764c2e63a9dfff740378a08db206acb5
Sha384
cf49e19bbe0bca7b5a1cd1abcde7f7f1d1a8f42cadf5bdd26bfbc8fa14f2813d32d1fd3fd1ec7d9d0b6a6e8575c0c7d6
Sha512
759d7fab16f0643f3b5a36e2986c0d70ba2c3b6c813f996fc0bee472e440ab1c81f6e1018a7e1b3ed3d5fcb4c53c926254ffd631a00609bf085e806a22dfe187
SSDeep
24:93ty2ISUjmyAIYEAHclL4xwB7wHQvYcErdMfZYt/DII:93rIlLAIYpct4xoMwverUYpII
TLSH
0411DAD72AEB369AE86F60BC196BEF964005146044D1D2D536F3C33643998581785E86
3 malicious · 3 files
ZIP9ec90d7b376e4263677209927494a81dT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKDOC-J13YGB.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
arc:zip>lnk~T1059.003~T1202~T1204.002
Shape
arc:zip>lnk
malicious
2 nodes
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential3 malicious · 3 files
ZIP9ec90d7b376e4263677209927494a81dT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKDOC-J13YGB.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
No malware configuration was found at this point.
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
9ec90d7b376e4263677209927494a81d › DOC-J13YGB.lnk
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with EssentialSign in or create a free account to view the matching YARA rules.
Create a free account