Malicious
c5c82db74d021eb99207ed261743fc67
ZIP Archive
MD5: c5c82db74d021eb99207ed261743fc67
Size: 590 B
application/zip
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
ZIP archive
Size
590 B · 590 B
First seen
2026-08-04 08:04 · 2 months ago
Last seen
2026-08-04 08:04 · 2 months ago
Last analysis
2026-08-04 08:04 · 2 months ago
Hashes
MD5
c5c82db74d021eb99207ed261743fc67
Sha1
9610c1873bc4cb318ed8a00678b60da3aaf27770
Sha256
e449a92a4cc7ad0550b60d74c65fbd799f970722b2b1d3c6e4dfc78130b69ff6
Sha384
abfe6d50600bae931fb7ca23d2c545251625595221bbcea420911300722c2e9ba37a55940742891271dc9412ed3cebdb
Sha512
99b94933ff72c11ca2f5843d8a57307d9237be4d4fb8d989cb0b7b700bc8b503dbbcc5c211769f18ce0365ddab0b16c871f6ff3766e8469e8f125cdfd09cf905
SSDeep
12:5jWSjRIqsyhQiRvK+UG5+9+RjptVWSLgEF+F884xaNbBjzuY5970w4o680asSj20:9WSjR9syhQiRlQIwGl4IQNbBjzX7046+
TLSH
F4F096088BA2CF4AC887F3F711AE732F9D9000686A49880999B1759CDDF0B0B6D04A7C
3 malicious · 3 files
ZIPc5c82db74d021eb99207ed261743fc67T1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKDOC-RIL3KO.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
arc:zip>lnk~T1059.003~T1202~T1204.002
Shape
arc:zip>lnk
malicious
2 nodes
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential3 malicious · 3 files
ZIPc5c82db74d021eb99207ed261743fc67T1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKDOC-RIL3KO.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
No malware configuration was found at this point.
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
c5c82db74d021eb99207ed261743fc67 › DOC-RIL3KO.lnk
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with EssentialSign in or create a free account to view the matching YARA rules.
Create a free account