Malicious
e02ff2875e844d2476f4095e8862196f
ZIP Archive
MD5: e02ff2875e844d2476f4095e8862196f
Size: 890 B
application/zip
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
ZIP archive
Size
890 B · 890 B
First seen
2026-08-04 08:02 · 2 months ago
Last seen
2026-08-04 08:02 · 2 months ago
Last analysis
2026-08-04 08:02 · 2 months ago
Hashes
MD5
e02ff2875e844d2476f4095e8862196f
Sha1
cbbca5f7cc7d8fb01fcde439136a9789c1e17bb1
Sha256
457b75db7d2c2c24e74810ac1eb00da2a8d398486e57b87c9114cfa98f89cbec
Sha384
b2e1be45b681397c2710c3743b3bef983ef7e8e7dda85ecf6e61a77ea7b7cd1a30987f8902c943b1f8d3561356fed763
Sha512
efc19c2cb7f4e322b5f400969a8b03a575355e5fc26f2c004450b90b37884b6b65afc23a04a5894d67947739965d4f5d7e72fdfc08c91f809f5a1fe2950b09f8
SSDeep
12:5jk/2/tytdCUA9YbZMQ+p3p9dqhfEpupURKYiSo+TZBno1pjDuIERnpc+nfUC87W:9kO/ibhPiWUR9iDZQpPUF65+2N08l
TLSH
B511675D52EEBB4DD71BC9B5170241A1AC1BE5D023616056129CD44578EDB44038814F
3 malicious · 3 files
ZIPe02ff2875e844d2476f4095e8862196fT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKDOC-WJS97S.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
arc:zip>lnk~T1059.003~T1202~T1204.002
Shape
arc:zip>lnk
malicious
2 nodes
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential3 malicious · 3 files
ZIPe02ff2875e844d2476f4095e8862196fT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKDOC-WJS97S.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
No malware configuration was found at this point.
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
e02ff2875e844d2476f4095e8862196f › DOC-WJS97S.lnk
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with EssentialSign in or create a free account to view the matching YARA rules.
Create a free account