Malicious
c2b35f1fbe0cf338625833392a14965a
ZIP Archive
MD5: c2b35f1fbe0cf338625833392a14965a
Size: 600 B
application/zip
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
ZIP archive
Size
600 B · 600 B
First seen
2026-08-03 12:00 · 2 months ago
Last seen
2026-08-03 12:00 · 2 months ago
Last analysis
2026-08-03 12:00 · 2 months ago
Hashes
MD5
c2b35f1fbe0cf338625833392a14965a
Sha1
c16a9071f34d019d4add1dc1a8695db3cbcf1812
Sha256
1818fb47bb60aab88f9a8d45e27894db821bfe40915677d210a0f8e22567cb4f
Sha384
953122d26c7ffc8209ab21732cb2671948aeab79d634b5c98f5c7b5085f113f66a7ab01b9eba4976605938e14ca9cdef
Sha512
bd321dfde2ead3c7bb84404b93b2569d02f44f97387e56bcbe8240aa0ff43a7c0dc109ad36451413d9cdc3e404e94ce2214dc0828c0e2326f6bc884794ef3417
SSDeep
12:5jG4zheYv37rokCVN/MaOgeMWc5yBirc6HQrWwEqs42h5JaZlt:9XdfvokGF1eMWc5a6wCwEqxft
TLSH
75F047C058018D83E5F3CE75004B3D4CC5F00131B606CE59EC6A162D1962B3B4724CD4
3 malicious · 3 files
ZIPc2b35f1fbe0cf338625833392a14965aT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKDOCpdf2107-C1MQPJ.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
arc:zip>lnk~T1059.003~T1202~T1204.002
Shape
arc:zip>lnk
malicious
2 nodes
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential3 malicious · 3 files
ZIPc2b35f1fbe0cf338625833392a14965aT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKDOCpdf2107-C1MQPJ.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
No malware configuration was found at this point.
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
c2b35f1fbe0cf338625833392a14965a › DOCpdf2107-C1MQPJ.lnk
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with EssentialSign in or create a free account to view the matching YARA rules.
Create a free account