Malicious
e0648045cf9013f5e18931467ce8dc8c
ZIP Archive
MD5: e0648045cf9013f5e18931467ce8dc8c
Size: 967 B
application/zip
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
ZIP archive
Size
967 B · 967 B
First seen
2026-08-03 13:35 · 2 months ago
Last seen
2026-08-03 13:35 · 2 months ago
Last analysis
2026-08-03 13:35 · 2 months ago
Hashes
MD5
e0648045cf9013f5e18931467ce8dc8c
Sha1
281496c473323af4b6a830d045962b13b8ea0789
Sha256
461a555bb0094eceb31223abb97d99dadc1fb7e377e60f212601545bd99f767c
Sha384
628968499dfd36493698a8edbdc73bf1edb71cc548cb12430670ab3209ff7dc2a8b4190f827daf2cb12bf6bd87bfac73
Sha512
a608f33367e0335a59796c415a13b67f4521a5fd138c246bcde5ee8b5084e45b3793176a53a8c616d68459d58cd00834ea3a1bc47680376c5c70ba242b59997a
SSDeep
24:9HpXsCjIHBc6AfavciP1uvCNGg8CRI/fs8Yi0J2x75ASIJ5nj:9HpXsVQaSWdRuk8l0J2xW5nj
TLSH
1911C8FD9DA24C95C400893730175143A87B09F8A0AFDDF350198BF73C1BA695AB1358
3 malicious · 3 files
ZIPe0648045cf9013f5e18931467ce8dc8cT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKDOC-N289WW.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
arc:zip>lnk~T1059.003~T1202~T1204.002
Shape
arc:zip>lnk
malicious
2 nodes
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential3 malicious · 3 files
ZIPe0648045cf9013f5e18931467ce8dc8cT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKDOC-N289WW.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
No malware configuration was found at this point.
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
e0648045cf9013f5e18931467ce8dc8c › DOC-N289WW.lnk
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with EssentialSign in or create a free account to view the matching YARA rules.
Create a free account