Malicious
aa1d08490ad52e8de70fc26241ad2d21
ZIP Archive
MD5: aa1d08490ad52e8de70fc26241ad2d21
Size: 581 B
application/zip
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
ZIP archive
Size
581 B · 581 B
Hashes
MD5
aa1d08490ad52e8de70fc26241ad2d21
Sha1
3d701781c0255cd4541b4798b13c2d776502ed58
Sha256
83e882c80c1fe2caadcc61d1f72b7200d25360ee1828e4fcbc2430a4df3f6335
Sha384
1b533981277ff3a9ad56f3f03f64456fd71c92c078623b4a6b708631e64874d41dd97acfc435f9acd3fe72684e05eca9
Sha512
3129ac0ac89bc01f4c90eb95aec9050daf9a30ceb23f282cada3a80c205d303b7d4260293295cd180fde63ea14ac25a6fea3e160ccb4fd1a98e66f6423a24f0e
SSDeep
12:5jdgpTu11U6sRZfPA/ugaog7cC0qsjIIMcIvy4rZAINbzBpliaoT:9d8i1e5Rp4/u0I0Knbq4a8bzfUT
TLSH
36F0E18149A6B35EC08589728A7BD107A84B80A0840F6B536835D54D5C0DCF15A85CCB
3 malicious · 3 files
ZIPaa1d08490ad52e8de70fc26241ad2d21T1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKDOC-5WUXFK.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
arc:zip>lnk~T1059.003~T1202~T1204.002
Shape
arc:zip>lnk
malicious
2 nodes
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential3 malicious · 3 files
ZIPaa1d08490ad52e8de70fc26241ad2d21T1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKDOC-5WUXFK.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
No malware configuration was found at this point.
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
aa1d08490ad52e8de70fc26241ad2d21 › DOC-5WUXFK.lnk
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with EssentialSign in or create a free account to view the matching YARA rules.
Create a free account