Malicious
ab07301843a875e5af4c0b04b8f57f57
ZIP Archive
MD5: ab07301843a875e5af4c0b04b8f57f57
Size: 893 B
application/zip
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
ZIP archive
Size
893 B · 893 B
First seen
2026-08-03 13:36 · 2 months ago
Last seen
2026-08-03 13:36 · 2 months ago
Last analysis
2026-08-03 13:36 · 2 months ago
Hashes
MD5
ab07301843a875e5af4c0b04b8f57f57
Sha1
5d30c01d2e0ca5ab5200b6361a525927f0190bfa
Sha256
b3d59ac4f0b501b1d23a3a6e3636eab98bd0bef4363c17af21bb410521ec5fb6
Sha384
50c8c992e1a027a1fe7156eccc58a0c91ce6622649e7591a90ad69d590906b0adcbc0ec685baf4021300879423551a9c
Sha512
d90080428754dbe292ea85f654a739cd39c2eed5f7538c88c6fde04cce89a787c528a734c3029a9851086129659a22a796d3472cb7740d17bdbb1ec2891ad75b
SSDeep
24:9Mp32NsEV2G9qS088JpZ1/DVDIlacsGY+m5E47fsZ:9MhAsEjq7FDVDIlaD+hSfsZ
TLSH
DA1163DF071A0512C92ACEF2A32FD441A0222C818C10787BD0DEA88B6C043024F5A8AF
3 malicious · 3 files
ZIPab07301843a875e5af4c0b04b8f57f57T1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKDOC-CFWPTB.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
arc:zip>lnk~T1059.003~T1202~T1204.002
Shape
arc:zip>lnk
malicious
2 nodes
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential3 malicious · 3 files
ZIPab07301843a875e5af4c0b04b8f57f57T1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKDOC-CFWPTB.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
No malware configuration was found at this point.
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
ab07301843a875e5af4c0b04b8f57f57 › DOC-CFWPTB.lnk
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with EssentialSign in or create a free account to view the matching YARA rules.
Create a free account