Malicious
afab86a7876c917533b0d770a02b16bd
ZIP Archive
MD5: afab86a7876c917533b0d770a02b16bd
Size: 978 B
application/zip
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
ZIP archive
Size
978 B · 978 B
First seen
2026-08-03 13:38 · 2 months ago
Last seen
2026-08-03 13:38 · 2 months ago
Last analysis
2026-08-03 13:38 · 2 months ago
Hashes
MD5
afab86a7876c917533b0d770a02b16bd
Sha1
1e178755beda8807b8ec22494b6b87e2652ed929
Sha256
81b5b8e5c01a3d1a03b16ac816501686482fe7d4f1ea3a436cc782dea1e5ef7a
Sha384
90e865a3fc81b8cf20f06ac9faeaebdd8e8968f5d332f387078921837e36d63cbeafc4ff6b3360eddf1f56d5ff58ed96
Sha512
4563abc533f816e530a943dc6da666255cadaa3dec5e2809c2d8aca99527f90e2c96c1f26785cf62dc5317d716a28a09ce1df49316bebc74957648d93637f7b6
SSDeep
24:9HtoFiqLtSV1ZA8AzC69imTF6Ew3dZLkPizxk36XGVRa7UttY8:9HSiqkDZQzC6AkFRIZLm3dVcgtS8
TLSH
291198F28B08151CDC02353DD276609590F453C00DA97E77D22EE8DEA47BA955541E14
3 malicious · 3 files
ZIPafab86a7876c917533b0d770a02b16bdT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKDOC-CESCXP.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
arc:zip>lnk~T1059.003~T1202~T1204.002
Shape
arc:zip>lnk
malicious
2 nodes
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential3 malicious · 3 files
ZIPafab86a7876c917533b0d770a02b16bdT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKDOC-CESCXP.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
No malware configuration was found at this point.
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
afab86a7876c917533b0d770a02b16bd › DOC-CESCXP.lnk
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with EssentialSign in or create a free account to view the matching YARA rules.
Create a free account