Malicious
ab0002bec82cd9e4821b2de545bda709
ZIP Archive
MD5: ab0002bec82cd9e4821b2de545bda709
Size: 594 B
application/zip
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
ZIP archive
Size
594 B · 594 B
First seen
2026-08-04 08:01 · 2 months ago
Last seen
2026-08-04 08:01 · 2 months ago
Last analysis
2026-08-04 08:01 · 2 months ago
Hashes
MD5
ab0002bec82cd9e4821b2de545bda709
Sha1
6fa538327389dcb7b45613bfc8219972b2abfdf3
Sha256
1d8cef8096ff0ae67219950ef31feeba7f9ddd6a593ba2a7c85c1623acf9d986
Sha384
0a0982a3dda6da393e61c5697afc1e5b8d4abbf684862f2516113681f291e6bd53263e4403017b31293028d380ea57b5
Sha512
f4d0e28b6a4aa60b2d06f5864f1e502a3cabd94463375c24c2b1b84276596bf57f8e853758b0d2a335c9ff08ccdb978524083682d9861c4ecea977c11de0edee
SSDeep
12:5j5JbO1FmXXW81ywuu4C8de6cvOCZTUHJGOBcvJmaoN:9DO14XZ1ywt4OHTIJGScsN
TLSH
33F041B7C45DA0A9C3C180F13E976B8B0E1188C1482BB79A458CA80D3EEC0889A57811
3 malicious · 3 files
ZIPab0002bec82cd9e4821b2de545bda709T1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKDOC-PWPR2H.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
arc:zip>lnk~T1059.003~T1202~T1204.002
Shape
arc:zip>lnk
malicious
2 nodes
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential3 malicious · 3 files
ZIPab0002bec82cd9e4821b2de545bda709T1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKDOC-PWPR2H.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
No malware configuration was found at this point.
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
ab0002bec82cd9e4821b2de545bda709 › DOC-PWPR2H.lnk
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with EssentialSign in or create a free account to view the matching YARA rules.
Create a free account