Malicious
e27983b8fbe641c1989189fa5f43dcdf
ZIP Archive
MD5: e27983b8fbe641c1989189fa5f43dcdf
Size: 581 B
application/zip
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
ZIP archive
Size
581 B · 581 B
First seen
2026-08-03 12:38 · 2 months ago
Last seen
2026-08-03 12:38 · 2 months ago
Last analysis
2026-08-03 12:38 · 2 months ago
Hashes
MD5
e27983b8fbe641c1989189fa5f43dcdf
Sha1
8d87169b2e72bcbd8f92f9a1b25f8f5933dd33fe
Sha256
66ce6053565936463ceecf004f498a3a10bdb6ac63c40b92e13a8790dabccd8a
Sha384
d6d12aea78108e6f6c090218d1488e98959862ede70060d58fcdd5865f54a85b8901f9769c86ea3eecb5bcf971325a43
Sha512
ea0bdc71f118324d1a28983f36aa109dcac458af672a6b1d1667294d64cab56833a496a61c0b2d047bfa1405fceaa0f345c89d60a5fa883bfd4dd23b69e02ceb
SSDeep
12:5jPBiRbVjqeVT0EpHRN52HgCX4H8v+Ony+7qPXMnZBiRbkcaoT:95iRbVjbDNR8v+Ony+ePXMnniRbkIT
TLSH
E4F0E1679141D89CD95670B813A1ADD54107E1858107746DB0B6F98538021B51CEE5C0
3 malicious · 3 files
ZIPe27983b8fbe641c1989189fa5f43dcdfT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKDOC-TPWN8N.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
arc:zip>lnk~T1059.003~T1202~T1204.002
Shape
arc:zip>lnk
malicious
2 nodes
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential3 malicious · 3 files
ZIPe27983b8fbe641c1989189fa5f43dcdfT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKDOC-TPWN8N.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
No malware configuration was found at this point.
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
e27983b8fbe641c1989189fa5f43dcdf › DOC-TPWN8N.lnk
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with EssentialSign in or create a free account to view the matching YARA rules.
Create a free account