Malicious
e4ac79a923e595406a102392d08e8145
ZIP Archive
MD5: e4ac79a923e595406a102392d08e8145
Size: 990 B
application/zip
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
ZIP archive
Size
990 B · 990 B
Hashes
MD5
e4ac79a923e595406a102392d08e8145
Sha1
5c97d78093dcd3a6892bf7a4f3f1fc2b6be3e202
Sha256
ae3638dddce1646de68a1320b89d986fbc099382c580ce95e47e9d9d04519819
Sha384
6731638dbe06012955d38b1b465578a0451b7daa409188d561a973f76854957fa3f082660b8bfac1370c1812de309893
Sha512
5a3012e776b1f648b24e835be3a41a67669f687e72cc54e7801abc1351244137770aa9f5fc99ddc0b382cc287c6fc109a278ec5b2ba6acac129e8486df992f18
SSDeep
24:9Bl8Y4fT0FZq1pjv0RVyBg8YOhW6lyiwylQETckXzxErAI:9Ll4Ly5/8Y+W2Tc3MI
TLSH
DE11C808F8961714DB18E1743091D2018AA578DA902E769BB4FCDC2A5705A44260EB14
3 malicious · 3 files
ZIPe4ac79a923e595406a102392d08e8145T1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKDOC-68G5M5.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
arc:zip>lnk~T1059.003~T1202~T1204.002
Shape
arc:zip>lnk
malicious
2 nodes
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential3 malicious · 3 files
ZIPe4ac79a923e595406a102392d08e8145T1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKDOC-68G5M5.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
No malware configuration was found at this point.
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
e4ac79a923e595406a102392d08e8145 › DOC-68G5M5.lnk
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with EssentialSign in or create a free account to view the matching YARA rules.
Create a free account