Malicious
ab4c4cd127b1a4d92f564722b8af819f
ZIP Archive
MD5: ab4c4cd127b1a4d92f564722b8af819f
Size: 904 B
application/zip
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
ZIP archive
Size
904 B · 904 B
Hashes
MD5
ab4c4cd127b1a4d92f564722b8af819f
Sha1
39fe75c5fce210925ba0e8d5ee56890e7bb683ba
Sha256
7e2219b83266c80baf0aa69cb3ff9119d6bc3688a9c6d714b61fbd6e89e7bdf5
Sha384
8b1b83238a65ee4d2bd7381717c80ee5ef4d465d1e98ff0d13d8741a12f3c0e695ef87d96d28f10efc6fc3063cecd919
Sha512
70060c04cfc630f173c029082ad6df0c1cbfc16ce1f8131d251063dd63b49396e8a25a2fe3ebc4ee248a7905165e605fb062054e0768fd3823902b0a9d9458b7
SSDeep
24:94diuwozE4ds3A3VkqIrBYmVu8KTzR1kfGeUK:9Gi5CmQ3KqINIPRWOXK
TLSH
DE119B33574B1514FACEE07DBA26A63E45747FF1544D2CC76B5CC83994014235D09C60
3 malicious · 3 files
ZIPab4c4cd127b1a4d92f564722b8af819fT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKDOC-INHISG.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
arc:zip>lnk~T1059.003~T1202~T1204.002
Shape
arc:zip>lnk
malicious
2 nodes
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential3 malicious · 3 files
ZIPab4c4cd127b1a4d92f564722b8af819fT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKDOC-INHISG.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
No malware configuration was found at this point.
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
ab4c4cd127b1a4d92f564722b8af819f › DOC-INHISG.lnk
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with EssentialSign in or create a free account to view the matching YARA rules.
Create a free account