Malicious
b0a580be4052ed35763ed99ab218c087
ZIP Archive
MD5: b0a580be4052ed35763ed99ab218c087
Size: 872 B
application/zip
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
ZIP archive
Size
872 B · 872 B
First seen
2026-08-03 13:32 · 2 months ago
Last seen
2026-08-03 13:32 · 2 months ago
Last analysis
2026-08-03 13:32 · 2 months ago
Hashes
MD5
b0a580be4052ed35763ed99ab218c087
Sha1
02adc9600e8b6b833d2731502f46a0be0ceeca5c
Sha256
21289a67eb31dfe94b898d1fd1e91a4558ba20c995bc0cffa3637a03260d665b
Sha384
cbfbad4cfd3ee433f8eb99df7bd0871d8071b311cc0a07e8160f7963b1a3fe635deae77a03ec773f8a42aed32895968f
Sha512
4159e0725ad29a8e8d76bc4393e13da18696e246a1d347449ac6e7e2ed9c8538dabab55488447a08d0eae0e662df80ff76588e1ae7b70d5140d5f98fbd33ed52
SSDeep
24:9BF6ixxaML7NGmcOupTj6T90g831HiifA9M6tnBUFUul:9BF69MtGHGZ4Ho9M6BBUFUq
TLSH
F71156C262FE4D59FE128BFAD231CBF9E02EC1765805D5091B3DDE231C51885B531447
3 malicious · 3 files
ZIPb0a580be4052ed35763ed99ab218c087T1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKDOC-I2R6EC.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
arc:zip>lnk~T1059.003~T1202~T1204.002
Shape
arc:zip>lnk
malicious
2 nodes
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential3 malicious · 3 files
ZIPb0a580be4052ed35763ed99ab218c087T1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKDOC-I2R6EC.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
No malware configuration was found at this point.
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
b0a580be4052ed35763ed99ab218c087 › DOC-I2R6EC.lnk
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with EssentialSign in or create a free account to view the matching YARA rules.
Create a free account