Malicious
9f21c7f0375081ce0515481830ae28b9
ZIP Archive
MD5: 9f21c7f0375081ce0515481830ae28b9
Size: 583 B
application/zip
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
ZIP archive
Size
583 B · 583 B
First seen
2026-08-04 08:32 · 2 months ago
Last seen
2026-08-04 08:32 · 2 months ago
Last analysis
2026-08-04 08:32 · 2 months ago
Hashes
MD5
9f21c7f0375081ce0515481830ae28b9
Sha1
d85bb76229cfcdc11127de0551bcb0d9d47ccbd1
Sha256
6292d9c50f4d1b778b03ad85b7d7f5eb34674e2d8509bbf3c383407c6015c06c
Sha384
691f708fc02908017f234f28c5f5145a04bc0e2dce5f1a658fac4dcf9f9954d66e25f3d19f974261df46dc84dc4989cb
Sha512
b9ed45f2d0869b5181cecb9eaf5320d2d41e5f35b508b52aba55c31040d12fbf2de0b0343a419d244c7819f8e0493d837d365c0a42d2c9d3aee0423561c333d3
SSDeep
12:5jNTkL3naiQ6geeVCbuk/eOowwu2g0oGk9g+xF6AdMg5kgOMgq5mK6TIMliaoBn:9NYDe6gp2uQeRF9HoGkGOF6TK7XTLMlo
TLSH
1CF0E1DEC14E200ED40892B9959591DDC03051A3CA5F6AD9EF2AD61D48298ED4F26C15
3 malicious · 3 files
ZIP9f21c7f0375081ce0515481830ae28b9T1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKDOC-HE9V0I.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
arc:zip>lnk~T1059.003~T1202~T1204.002
Shape
arc:zip>lnk
malicious
2 nodes
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential3 malicious · 3 files
ZIP9f21c7f0375081ce0515481830ae28b9T1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKDOC-HE9V0I.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
No malware configuration was found at this point.
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
9f21c7f0375081ce0515481830ae28b9 › DOC-HE9V0I.lnk
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with EssentialSign in or create a free account to view the matching YARA rules.
Create a free account