Malicious
c66488b511c5bc3948c43d686b4eeb3c
ZIP Archive
MD5: c66488b511c5bc3948c43d686b4eeb3c
Size: 890 B
application/zip
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
ZIP archive
Size
890 B · 890 B
Hashes
MD5
c66488b511c5bc3948c43d686b4eeb3c
Sha1
fdadee7beefc302960d17035045cfcdd58273336
Sha256
449ddfb3e44f6e4bb4c6e7d53d50035c9263cb876702e6e4dfbbd50a5b0fe697
Sha384
fa6d7ce3490d96c1e3e93847f5e14ec15a40fa483bd759a522afe38b5273a9e4a66f79920c6bb5d86db3fe0bfeb12c80
Sha512
e2202bbac938cf49ef52406e6bdcc04a98781894bf1afc0b5ed29bbf1c14fb2fee3c55076bfc828a2b2b2456132350dca928cc614651f14966b08e39d64489b6
SSDeep
24:9GzABZNYSY+6/hkm6Oc7UzSd5LT8HqxJp4b8l:9GzABZKv+65kmG7UQ5Mqx8b8l
TLSH
F211B3120BCE8548C02EF5FA158B07CE5410E09390235F077002B02B82A888A3F0AC8D
3 malicious · 3 files
ZIPc66488b511c5bc3948c43d686b4eeb3cT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKDOC-QT3WHM.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
arc:zip>lnk~T1059.003~T1202~T1204.002
Shape
arc:zip>lnk
malicious
2 nodes
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential3 malicious · 3 files
ZIPc66488b511c5bc3948c43d686b4eeb3cT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKDOC-QT3WHM.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
No malware configuration was found at this point.
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
c66488b511c5bc3948c43d686b4eeb3c › DOC-QT3WHM.lnk
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with EssentialSign in or create a free account to view the matching YARA rules.
Create a free account