Malicious
ea4d188f4871e2f06ee561d07737ec31
ZIP Archive
MD5: ea4d188f4871e2f06ee561d07737ec31
Size: 953 B
application/zip
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
ZIP archive
Size
953 B · 953 B
Hashes
MD5
ea4d188f4871e2f06ee561d07737ec31
Sha1
db6f4a82bd06c7389f1d7e996ff25ae1ff82946e
Sha256
1dfffdd887449b4e40ad5c58d3f64dff1676090762a15c7ecdd3248f625cfa62
Sha384
30aa7ae7e8ce12fc1de629899f91592c3dd40fa81f18812839a7d469b8bff06e9d6a62c38365b3949418431bc5e5222c
Sha512
bac45fc91febc77c5b2ad68b1deda14c1b513ccf5faf58450f28af1095cd81ae9b328df11d55246233ffcc432ae14e4c92a5a6584516cd052d86d822b2a68a63
SSDeep
24:9iGqE7V1E9757uvsU+HxURPL4nI6QRcNGK7okUKekJC1:9RqE7n075PbHxOLf62cNGK7oTKekw1
TLSH
8411C8F1230489D3EA12D63C9C4A29804B42B06A830D731A971DD4037C10D58DF2B6C2
3 malicious · 3 files
ZIPea4d188f4871e2f06ee561d07737ec31T1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKDOC-PYU13I.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
arc:zip>lnk~T1059.003~T1202~T1204.002
Shape
arc:zip>lnk
malicious
2 nodes
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential3 malicious · 3 files
ZIPea4d188f4871e2f06ee561d07737ec31T1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKDOC-PYU13I.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
No malware configuration was found at this point.
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
ea4d188f4871e2f06ee561d07737ec31 › DOC-PYU13I.lnk
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with EssentialSign in or create a free account to view the matching YARA rules.
Create a free account