Malicious
a915678da8e9935fffc4a8635d3b7a0f
ZIP Archive
MD5: a915678da8e9935fffc4a8635d3b7a0f
Size: 583 B
application/zip
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
ZIP archive
Size
583 B · 583 B
Hashes
MD5
a915678da8e9935fffc4a8635d3b7a0f
Sha1
0b2a4de9b93f254e0ef2d4878f252a2a895de5fd
Sha256
24b7a0c8256e13edaf81ef116d5b1eed0db29620d9dea2f813efbbfc4781b0d9
Sha384
d868ab5063b5fa9b930c481636ef0387e0d6d364c76e1bb3bf8c59c7fe6afa0f764969cdf5c54338a4eb45872a9e3df4
Sha512
ed90bc87f4d7ce9d0b0567afa0ac53d613ec091444b8c3653748391c92ebb69bfb60e82849c60d25e8d52b774af1b06a5b30547dda0c71867ab0d9d668ac521a
SSDeep
12:5jHaikMXxAxCRu0wVvhtFzvhG3bnlUaoBn:9HaikMXnuhrilgB
TLSH
FFF0266729016CC9EE47C1F27176110E584C4FCC85FF014E71A4DE0C5A1F0695C6E4F9
3 malicious · 3 files
ZIPa915678da8e9935fffc4a8635d3b7a0fT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKDOC-RQPH86.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
arc:zip>lnk~T1059.003~T1202~T1204.002
Shape
arc:zip>lnk
malicious
2 nodes
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential3 malicious · 3 files
ZIPa915678da8e9935fffc4a8635d3b7a0fT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKDOC-RQPH86.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
No malware configuration was found at this point.
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
a915678da8e9935fffc4a8635d3b7a0f › DOC-RQPH86.lnk
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with EssentialSign in or create a free account to view the matching YARA rules.
Create a free account