Malicious
9fe9a21d22069f92192d84cadc3f8e08
ZIP Archive
MD5: 9fe9a21d22069f92192d84cadc3f8e08
Size: 830 B
application/zip
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
ZIP archive
Size
830 B · 830 B
First seen
2026-08-03 10:53 · 2 months ago
Last seen
2026-08-03 10:53 · 2 months ago
Last analysis
2026-08-03 10:53 · 2 months ago
Hashes
MD5
9fe9a21d22069f92192d84cadc3f8e08
Sha1
0c7d67bfbc9872b5adadd7de1d817ca7136a8345
Sha256
a7bd593dae8d9b973001cc491868fc379968fc8dee1a471ee23ea25a1bd5bbfd
Sha384
f20c38b18ae3e8e0bfc37c35daaa2b9e7a92ae3a831292d47fd66fc57d4b450332715250b003d4ab9e954f74ffeb6ef7
Sha512
f944cca33c9f36955dfc0d14558abebfc881d880596f472bc4ac4c5e033ba81f203ee29b924e352da7d3bfad8079873513170112ab2e5695d96f745fb5811d8e
SSDeep
24:9n/5LEnub+vMVjzvGJ5E8GaYPZE0WfbI/g8/7s1q7zX5:91EXy3vGo5Lxac/rDwq7zX5
TLSH
790186AD10AE7529D811CE747335D822532525810AAF840B2334DC39B0FCCD1AA89EAE
3 malicious · 3 files
ZIP9fe9a21d22069f92192d84cadc3f8e08T1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKDOC-EXBRI2.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
arc:zip>lnk~T1059.003~T1202~T1204.002
Shape
arc:zip>lnk
malicious
2 nodes
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential3 malicious · 3 files
ZIP9fe9a21d22069f92192d84cadc3f8e08T1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKDOC-EXBRI2.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
No malware configuration was found at this point.
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
9fe9a21d22069f92192d84cadc3f8e08 › DOC-EXBRI2.lnk
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with EssentialSign in or create a free account to view the matching YARA rules.
Create a free account