Malicious
e00ae1197c381650ffd21c69611553e3
ZIP Archive
MD5: e00ae1197c381650ffd21c69611553e3
Size: 847 B
application/zip
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
ZIP archive
Size
847 B · 847 B
First seen
2026-08-03 13:25 · 2 months ago
Last seen
2026-08-03 13:25 · 2 months ago
Last analysis
2026-08-03 13:25 · 2 months ago
Hashes
MD5
e00ae1197c381650ffd21c69611553e3
Sha1
42487fe01b473bd0b6a39d0432031c8461fa05b1
Sha256
4cbf8ba4ca388cc9fccc832247cb633a0357094fab2dc02cbb8f7e5bfcd6a54f
Sha384
da15176bb2677c8fd6815a701f1e831276757e0c909c8a4f7ae16efe67d40da78a288439ca850c76606f53a12471c488
Sha512
869414b0dcfbd4a1c54bd15503c6f6fc1f7ee9234556bcd852d955c7b08cc3e4aa190d940b9645d920d077e7efce60eb4c3ea33830bb2ede1e7d0448040ebd81
SSDeep
24:9kI4P+Rli5Q5H1etH2PtLOG8pdjQcmJVkp8D1l5Sqn:9T/o5Q91sH2VLOGnu8vEqn
TLSH
66018637486B1C3CD4B891BCAC46B43E846048891EC9CA547D07DC3C14487A56AC27F3
3 malicious · 3 files
ZIPe00ae1197c381650ffd21c69611553e3T1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKDOC-GHE06G.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
arc:zip>lnk~T1059.003~T1202~T1204.002
Shape
arc:zip>lnk
malicious
2 nodes
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential3 malicious · 3 files
ZIPe00ae1197c381650ffd21c69611553e3T1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKDOC-GHE06G.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
No malware configuration was found at this point.
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
e00ae1197c381650ffd21c69611553e3 › DOC-GHE06G.lnk
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with EssentialSign in or create a free account to view the matching YARA rules.
Create a free account