Malicious
e156baaae1cf4d32d1d069daa2d34eb8
ZIP Archive
MD5: e156baaae1cf4d32d1d069daa2d34eb8
Size: 583 B
application/zip
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
ZIP archive
Size
583 B · 583 B
First seen
2026-08-03 12:38 · 2 months ago
Last seen
2026-08-03 12:38 · 2 months ago
Last analysis
2026-08-03 12:38 · 2 months ago
Hashes
MD5
e156baaae1cf4d32d1d069daa2d34eb8
Sha1
e71d24a24019636d68accfb1f4aa8e1165e6b207
Sha256
a08ddc645e2870c3ca42b010bd288b2b192639d5808974328cf4d8e436beac9a
Sha384
81420ba38dfd3d09731322cb52dd7c75385240d27459aee0b477e6c3ed3eef618368b5cfebe19a24ce7cefe9319fde9c
Sha512
0d686f2f9e792bfa5f228082f3a588e0c3e94283f5814e5c2e2959935413e300927d729a2fae119346042f1d2d064feb67761b57f08b16f07be1614f7c561e0a
SSDeep
12:5j7FEft5glRzQcKWJkjHyXLp0KI8Iq0pJfV+1P1aOOE39FERJaoBn:9eftekjHydfI+LaO1s9B
TLSH
BEF026328919E1E5C31F4CB896A124DE043371B2D65F2EDD0531FF89D9D11C4F5B1991
3 malicious · 3 files
ZIPe156baaae1cf4d32d1d069daa2d34eb8T1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKDOC-MX64WH.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
arc:zip>lnk~T1059.003~T1202~T1204.002
Shape
arc:zip>lnk
malicious
2 nodes
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential3 malicious · 3 files
ZIPe156baaae1cf4d32d1d069daa2d34eb8T1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKDOC-MX64WH.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
No malware configuration was found at this point.
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
e156baaae1cf4d32d1d069daa2d34eb8 › DOC-MX64WH.lnk
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with EssentialSign in or create a free account to view the matching YARA rules.
Create a free account