Malicious
ccfbef9df1b4cb269121a27a16b4f7fe
ZIP Archive
MD5: ccfbef9df1b4cb269121a27a16b4f7fe
Size: 589 B
application/zip
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
ZIP archive
Size
589 B · 589 B
First seen
2026-08-03 11:28 · 2 months ago
Last seen
2026-08-03 11:28 · 2 months ago
Last analysis
2026-08-03 11:28 · 2 months ago
Hashes
MD5
ccfbef9df1b4cb269121a27a16b4f7fe
Sha1
670b8bf40697fa1b12d7debb7c40e9a35fc3b406
Sha256
4660316a52cc36bd83cd364a11bfa3713d99db90c0a8824baac67949efd57261
Sha384
174080d9b21c80bd691fe0f6908f16bda799c8924054aea35dd1116d4ac53b8abf5ac304451ecce5fc965fee153c0ac4
Sha512
122b97a416f52b0eea6176f114380c3f0e8c3f0a879c2194fe675435c717ff11394cad4280a18aaf41530724e3096d7e860366306e09f158b0d5d9b77e55cb98
SSDeep
12:5jXgQOXFq75hI2wiR2I1RzCGtZqb4hKOtX1qPVKf4iRq78j7nB1iaor:9XgGy3iQE2GbqAKGomRq7MB1Cr
TLSH
4CF0E103D2E92689C346C4362EB36036062886B345634E5BC67EE79866054DA4D276B1
3 malicious · 3 files
ZIPccfbef9df1b4cb269121a27a16b4f7feT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKDOC-166Q11.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
arc:zip>lnk~T1059.003~T1202~T1204.002
Shape
arc:zip>lnk
malicious
2 nodes
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential3 malicious · 3 files
ZIPccfbef9df1b4cb269121a27a16b4f7feT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKDOC-166Q11.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
No malware configuration was found at this point.
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
ccfbef9df1b4cb269121a27a16b4f7fe › DOC-166Q11.lnk
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with EssentialSign in or create a free account to view the matching YARA rules.
Create a free account