Malicious
c964e2f059b6f650d74e8be665d17f36
ZIP Archive
MD5: c964e2f059b6f650d74e8be665d17f36
Size: 582 B
application/zip
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
ZIP archive
Size
582 B · 582 B
First seen
2026-08-03 10:50 · 2 months ago
Last seen
2026-08-03 10:50 · 2 months ago
Last analysis
2026-08-03 10:50 · 2 months ago
Hashes
MD5
c964e2f059b6f650d74e8be665d17f36
Sha1
b7958ba85c5ade4c69c6a324312dd3f915d462dd
Sha256
85ae015175d046402e57e8259e9150b15d265da2caf5b6cfac789f4d931ee499
Sha384
43dc273a806f2e186bd5c808279b98b5a2965102279f1d73b2d3b691e7ada081c7970cc161d464ac92d4b35fa857ee9e
Sha512
a4726fc98e8e5176d3f7fb5920e774be2b59aa048ebde1930af347b90844d0c29a23afdd0d84fc68c4595c80125748947ac1203ba4468316836f906d7971fc7d
SSDeep
12:5jwlqlBJJ0PdJMAM08HwQZ/nqMVSht8a4FZcskBk7vovsuGNGwY2lqlCnaoi:9wleBJ6PdWAM08Qo/hasZhkBkroJGgwQ
TLSH
6DF0262760F7FC1FC7577D3169B79A63A4283216C06946E34725D1189D505F70F026C7
3 malicious · 3 files
ZIPc964e2f059b6f650d74e8be665d17f36T1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKDOC-WFGWGP.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
arc:zip>lnk~T1059.003~T1202~T1204.002
Shape
arc:zip>lnk
malicious
2 nodes
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential3 malicious · 3 files
ZIPc964e2f059b6f650d74e8be665d17f36T1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKDOC-WFGWGP.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
No malware configuration was found at this point.
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
c964e2f059b6f650d74e8be665d17f36 › DOC-WFGWGP.lnk
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with EssentialSign in or create a free account to view the matching YARA rules.
Create a free account