Malicious
a50b79bd8942a6c66630ca1126108368
ZIP Archive
MD5: a50b79bd8942a6c66630ca1126108368
Size: 941 B
application/zip
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
ZIP archive
Size
941 B · 941 B
Hashes
MD5
a50b79bd8942a6c66630ca1126108368
Sha1
f13a3d526268e4d188bc3321040e024fc99943e2
Sha256
c8063adf031ac557e745433380abbf4ddb51582dba2669d2ebe270daefdd2b67
Sha384
bae57f3ccef2436106b4e48fb88f27c6f517564d9fed658f84a341fc4bc357ff9ce7e19a4eb7ac15b4640510bac8e8fc
Sha512
62a8e5d569c02ced5d4d2735e6a8b494946788bdd0281618bc0e7a6e8335f8bedc60d33bae0dce8577e831ab4fef5a49d52bb39025243fd4dbf33e64734683bf
SSDeep
24:9s/XeM9iNyv3yys0HFGCZN9dUZlJa4BCSbMgIinNa7G/ge8p:9s/r96C3ypSlrkDpRMhinNa7G/Up
TLSH
DA1188C9E4395FF8C271C8FDEAFA6630C268419D2C43925753DDE105506AC57275E346
3 malicious · 3 files
ZIPa50b79bd8942a6c66630ca1126108368T1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKDOC-WNEB5A.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
arc:zip>lnk~T1059.003~T1202~T1204.002
Shape
arc:zip>lnk
malicious
2 nodes
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential3 malicious · 3 files
ZIPa50b79bd8942a6c66630ca1126108368T1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKDOC-WNEB5A.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
No malware configuration was found at this point.
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
a50b79bd8942a6c66630ca1126108368 › DOC-WNEB5A.lnk
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with EssentialSign in or create a free account to view the matching YARA rules.
Create a free account