Malicious
bbec78c976a96c1ff9e459025a503dec
ZIP Archive
MD5: bbec78c976a96c1ff9e459025a503dec
Size: 579 B
application/zip
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
ZIP archive
Size
579 B · 579 B
Hashes
MD5
bbec78c976a96c1ff9e459025a503dec
Sha1
ffe0bdbbb87b5c0e58660f86499f4ee3fd9f33aa
Sha256
fece49a0a9ba875774e8843c8ac1dc3745a6ea6d58cffa3dbf525b13808014d9
Sha384
d913f0e5cd3b8e07e8b054b13c6956bda618e2723316f455a866612b722e6896d643d0db61c5b43f20c4a5bec451fb82
Sha512
2bc4b81a69e36803826c40c211a0f4965b5fa965021cd206c20b06a06280c5c457816ccdec6e2373960c38bb4102a10a8886a4ac9f0303b7ac9014a60669c0ea
SSDeep
12:5jyNwAqb5BbPDNKDa/kYeeZiBFZ4v8w0yEMF1hDtGFGOBnNuaoF/:9yNwXTodBFev9dEMF19BO5NeN
TLSH
C1F020AF479A4304C00BE8FA496BE8F92B308417400F122E19D7B0863FC16CF36A2995
3 malicious · 3 files
ZIPbbec78c976a96c1ff9e459025a503decT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKDOC-YYUZ2C.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
arc:zip>lnk~T1059.003~T1202~T1204.002
Shape
arc:zip>lnk
malicious
2 nodes
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential3 malicious · 3 files
ZIPbbec78c976a96c1ff9e459025a503decT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKDOC-YYUZ2C.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
No malware configuration was found at this point.
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
bbec78c976a96c1ff9e459025a503dec › DOC-YYUZ2C.lnk
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with EssentialSign in or create a free account to view the matching YARA rules.
Create a free account