Malicious
a5d13e9ecabdb7d0cf990fb68210055e
ZIP Archive
MD5: a5d13e9ecabdb7d0cf990fb68210055e
Size: 969 B
application/zip
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
ZIP archive
Size
969 B · 969 B
First seen
2026-08-03 11:11 · 2 months ago
Last seen
2026-08-03 11:11 · 2 months ago
Last analysis
2026-08-03 11:11 · 2 months ago
Hashes
MD5
a5d13e9ecabdb7d0cf990fb68210055e
Sha1
a44e58f18ecf7fdcb78b7883ad36a55311e48854
Sha256
109a662fba504efe2902282e6cc4ba524b4ef58df94fcaa2dd5316992308e5a8
Sha384
e122d0c2bdc34bc6aed37d74396afa678d1d8a9342e8ab1de1d7ea9de3a4fbd4d04e3b82e33575bf8cb089567ef15e48
Sha512
82ecc97aa5c126996433dda0529fe08c458e0ccf673dc97b8e9c1c9b091936da549321002b4b10ba3704e77c87d035f528e0a49181b63ed69d077fc746a686ae
SSDeep
24:9uXj5Z9D1AJBi//gHtvbauG/Wa/auOg0PzHsISA5CTBwcXPt:9u1LhUMIHHgcDsPBwKl
TLSH
2311C8A2C5574F00E1EFC07C45187CDD46EC3B04650EBA201FF2A4090936EE5664421C
3 malicious · 3 files
ZIPa5d13e9ecabdb7d0cf990fb68210055eT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKDOC-QWRNMW.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
arc:zip>lnk~T1059.003~T1202~T1204.002
Shape
arc:zip>lnk
malicious
2 nodes
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential3 malicious · 3 files
ZIPa5d13e9ecabdb7d0cf990fb68210055eT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKDOC-QWRNMW.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
No malware configuration was found at this point.
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
a5d13e9ecabdb7d0cf990fb68210055e › DOC-QWRNMW.lnk
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with EssentialSign in or create a free account to view the matching YARA rules.
Create a free account