Malicious
ea9174770c9e800a69523613ed5ec705
ZIP Archive
MD5: ea9174770c9e800a69523613ed5ec705
Size: 581 B
application/zip
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
ZIP archive
Size
581 B · 581 B
First seen
2026-08-03 10:36 · 2 months ago
Last seen
2026-08-03 10:36 · 2 months ago
Last analysis
2026-08-03 10:36 · 2 months ago
Hashes
MD5
ea9174770c9e800a69523613ed5ec705
Sha1
3b67164eda5e87f27cf00d80b1f33f74a43a2d72
Sha256
37ed15f3769b5f16e71df6fce082a8563b65f18d62a39b895fcf5c34ad3d06a9
Sha384
6cd0dbaf7cd3489392023741b86e6b5f17165573135c5450c3a03b68a611774ad233e229defd6c4aac9c69bba6fcb257
Sha512
5948f97686931141377bfbd16f3e54726da78985f3b0e59a59c1696faf108d1a0a311885627815deab11b51f99f67432d1e8e298902289794d1a71f8a51d42f0
SSDeep
12:5jRXgsaA4ziiQS3wCen3AR/5vs9/RkuKrxsj5n6QzozraoT:9RQsaaiQS3AnQR/ZsNwxmd6Qcz9T
TLSH
52F0960B2325C30CD41228F9B81F316E23D1BE0BE54090F64C2FE48CBCE53CD56945A8
3 malicious · 3 files
ZIPea9174770c9e800a69523613ed5ec705T1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKDOC-VZK5Y5.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
arc:zip>lnk~T1059.003~T1202~T1204.002
Shape
arc:zip>lnk
malicious
2 nodes
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential3 malicious · 3 files
ZIPea9174770c9e800a69523613ed5ec705T1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKDOC-VZK5Y5.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
No malware configuration was found at this point.
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
ea9174770c9e800a69523613ed5ec705 › DOC-VZK5Y5.lnk
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with EssentialSign in or create a free account to view the matching YARA rules.
Create a free account