Malicious
cfdfcab087c8d7161b100b12b7b6f9c3
ZIP Archive
MD5: cfdfcab087c8d7161b100b12b7b6f9c3
Size: 985 B
application/zip
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
ZIP archive
Size
985 B · 985 B
First seen
2026-08-03 13:35 · 2 months ago
Last seen
2026-08-03 13:35 · 2 months ago
Last analysis
2026-08-03 13:35 · 2 months ago
Hashes
MD5
cfdfcab087c8d7161b100b12b7b6f9c3
Sha1
90c2c28237e468b74eeafd5e5962ee0fccb4a244
Sha256
269357bf12cd38be45418876b54588ee87e24d4647e24c8df3fa4fb09e63a20f
Sha384
8df3aa78adc4c202d48569943c7e691fff042a107a703da2efdba703daf8d7065ee09190e5b5f217f1fa49c7b3e0144b
Sha512
e9c1f4c942e4bf07c51fbc6321b8b29fc18698d9bcb0b6b80358f29f8c0baa576f73996a84ebe279087a5df28f5369bd7f94fdb4a1073b9e76dbf5e4016e7d44
SSDeep
24:9VBoWHk3/Jq5WKMN/l6bavgYK/IcoILFZWhbrsYUjqKQm7pV:9V60k3csfga4YkFEuqK97pV
TLSH
4F11C89922240C5CD0DC6DF8FA00B71599862ACD14F2EAEF407986034A3F490B2C99DF
3 malicious · 3 files
ZIPcfdfcab087c8d7161b100b12b7b6f9c3T1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKDOC-EQ8025.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
arc:zip>lnk~T1059.003~T1202~T1204.002
Shape
arc:zip>lnk
malicious
2 nodes
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential3 malicious · 3 files
ZIPcfdfcab087c8d7161b100b12b7b6f9c3T1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKDOC-EQ8025.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
No malware configuration was found at this point.
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
cfdfcab087c8d7161b100b12b7b6f9c3 › DOC-EQ8025.lnk
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with EssentialSign in or create a free account to view the matching YARA rules.
Create a free account