Malicious
c254d15583df52638a876ec3723f32e8
ZIP Archive
MD5: c254d15583df52638a876ec3723f32e8
Size: 859 B
application/zip
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
ZIP archive
Size
859 B · 859 B
First seen
2026-08-04 08:21 · 2 months ago
Last seen
2026-08-04 08:21 · 2 months ago
Last analysis
2026-08-04 08:21 · 2 months ago
Hashes
MD5
c254d15583df52638a876ec3723f32e8
Sha1
f3cd267a497b29da20c790cd127d9630c7161ba2
Sha256
0afac242bc7376ab0682aca48010dab4a51827e0718551c2ee81ed0b0c567826
Sha384
5b62e2de9161f03eeb6a2dcd651811af2d5a3466b0bbfe5d7a1f8416d3726fb951c94a1d4239007141fe417a27655a8f
Sha512
24fbaab9261676c98d9e215ef39a21e54f5f6b65eae201ec4c77bf66a1317d303c0779c4d15a01770b8d63cd71b8437d5d876042250765316ded453ed5b75b45
SSDeep
24:9AI5b7EeVvPBEB7wJvyfAir13NbiPYZsj8gX8s7a23:95vKBsJaD13Fp/gXT753
TLSH
FC1192802122C55AE80090B24054322D6E6336C4C47B5E4B379EE235DDB0685B4328E8
3 malicious · 3 files
ZIPc254d15583df52638a876ec3723f32e8T1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKDOC-I3GOHP.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
arc:zip>lnk~T1059.003~T1202~T1204.002
Shape
arc:zip>lnk
malicious
2 nodes
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential3 malicious · 3 files
ZIPc254d15583df52638a876ec3723f32e8T1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKDOC-I3GOHP.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
No malware configuration was found at this point.
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
c254d15583df52638a876ec3723f32e8 › DOC-I3GOHP.lnk
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with EssentialSign in or create a free account to view the matching YARA rules.
Create a free account