Malicious
c0c6288483a20ba315759b9bd0fbb067
ZIP Archive
MD5: c0c6288483a20ba315759b9bd0fbb067
Size: 582 B
application/zip
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
ZIP archive
Size
582 B · 582 B
Hashes
MD5
c0c6288483a20ba315759b9bd0fbb067
Sha1
285d574e12ad612a857e8e874b8855c427f396d1
Sha256
5b0e477065dfd9e70e107c6c33cb306d8e98898467bdc0a5fe5228a10f420a37
Sha384
735bb329659799ca33e97fb363be11fb7c242c42c66230f9e266d14a488ab4002b6fcb9fccb6620c1713987e8ee3fd9a
Sha512
d372575523cc74ff0af3af3e4bdd4380efa82ae6a9e6fdc2211b78b279dad2ee09724a9124a0822faf44427c140c8568fe865892b55895ae01aad3a3ba54a69f
SSDeep
12:5jTh8xTupYw19M4iccbK6+kEpqlKrPHDtuPHfcbV4xb15F1g8viaoi:9ThWipYS9Kcy9ApcKrv8MbV4xF1g7i
TLSH
11F0E1C74294FC67F956C437201A51012D60A361458FBF0B417CE8769AD49A40CCEB15
3 malicious · 3 files
ZIPc0c6288483a20ba315759b9bd0fbb067T1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKDOC-BSGWZK.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
arc:zip>lnk~T1059.003~T1202~T1204.002
Shape
arc:zip>lnk
malicious
2 nodes
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential3 malicious · 3 files
ZIPc0c6288483a20ba315759b9bd0fbb067T1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKDOC-BSGWZK.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
No malware configuration was found at this point.
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
c0c6288483a20ba315759b9bd0fbb067 › DOC-BSGWZK.lnk
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with EssentialSign in or create a free account to view the matching YARA rules.
Create a free account