Malicious
d22a4c5c08ebac8b0dc4b5258419ee9b
ZIP Archive
MD5: d22a4c5c08ebac8b0dc4b5258419ee9b
Size: 583 B
application/zip
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
ZIP archive
Size
583 B · 583 B
First seen
2026-08-03 13:36 · 2 months ago
Last seen
2026-08-03 13:36 · 2 months ago
Last analysis
2026-08-03 13:36 · 2 months ago
Hashes
MD5
d22a4c5c08ebac8b0dc4b5258419ee9b
Sha1
6b2fe44622fa6dd3851ddcd79212bb500e99fe2e
Sha256
3a8cf0d31fb27c80ffcffb7d8bbebaf22ad7c47ed8fcea82c792e3efd0e9996b
Sha384
f0dfe5cb9988072ea18327d87109b0614be4d5bc08b9a5ceded6220c834a186316c682e1b119b0a5608cf0dd73608bd9
Sha512
d78c674d75fdc296e78e359333f4d7da8b946b7d707dcf926c0013d8430e70c090f03773b827b06f2990d75a67b5be9435205992a3ccdd5051dd9c0f521c48dd
SSDeep
12:5jQuovXpMFUIa+VtV4fZ5afC44XpWvbr08xDNamBvuYaoBn:9Pofya1GtV4fafC4mpabRbBGUB
TLSH
04F0EBA7A271C54DE68680B091AF063E4AB78606805BD6C82A34FBA589801D84B3C899
3 malicious · 3 files
ZIPd22a4c5c08ebac8b0dc4b5258419ee9bT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKDOC-EKGQCL.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
arc:zip>lnk~T1059.003~T1202~T1204.002
Shape
arc:zip>lnk
malicious
2 nodes
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential3 malicious · 3 files
ZIPd22a4c5c08ebac8b0dc4b5258419ee9bT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKDOC-EKGQCL.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
No malware configuration was found at this point.
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
d22a4c5c08ebac8b0dc4b5258419ee9b › DOC-EKGQCL.lnk
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with EssentialSign in or create a free account to view the matching YARA rules.
Create a free account