Malicious
a27ceacded02f83ef38b91eeeba169de
ZIP Archive
MD5: a27ceacded02f83ef38b91eeeba169de
Size: 6.22 KB
application/zip
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with Essential
| MD5 | a27ceacded02f83ef38b91eeeba169de |
| Sha1 | 369b4df4c789bef937267cb0b3b7a860811c7e00 |
| Sha256 | f5458cdd0c7e59010f630e60367c462bde992beb74e3583363bea195b73d91e4 |
| Sha384 | 1c67cd6e60a6789381143e48b32fe26a85b1dd96cbd9caea8bf8eae2c60fed2fd2e3b9504b94b10562706e6b74ed025d |
| Sha512 | 2820b14ee8a7bf491c9b7261ee02c2cf80bf7cfb7a084a613833d75f5313a64376afe1680eb2d4a6101a2ad400ee1650663b749d7500ad6a6a503e4a2ae41c8d |
| SSDeep | 192:bhVOHdAk/Xyej5cO2S3zSdkmtQYPna7aNwRb/D:NVO7ieySDSbsVRb/D |
| TLSH | DFD18CA4F98D94159AF6D1FB2CD918AD02BD2E646067643FF318124824BD60AA2D86CA |
Malicious
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
Structural branches: 2
STICH kept: 1secondary ignored: 1
bin
1Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
arc:zip>lnk~T1059.001~T1059.003~T1202~T1204.002>lnk:cmd
Shape
arc:zip>lnk>lnk:cmd
malicious
3 nodes
LNK: Command Execution
UNKNWOWNmalicious
powershuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential
Malicious
No malware configuration was found at this point.
LNK: Command Execution
UNKNWOWNmalicious
powershuhuhuhuhuhuhuhuhuhuhu
a27ceacded02f83ef38b91eeeba169de › IMG_20260727_124158.jpg.lnk
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential
You must be signed in to view YARA rules.