Malicious
ea9fda8b4dc6b10625b0e87a1dea3f2e
ZIP Archive
MD5: ea9fda8b4dc6b10625b0e87a1dea3f2e
Size: 592 B
application/zip
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
ZIP archive
Size
592 B · 592 B
First seen
2026-08-03 10:48 · 2 months ago
Last seen
2026-08-03 10:48 · 2 months ago
Last analysis
2026-08-03 10:48 · 2 months ago
Hashes
MD5
ea9fda8b4dc6b10625b0e87a1dea3f2e
Sha1
4e256efb6e45573a68a475fe8809833703d13b34
Sha256
090e0ae988b35c747fd2b34f11917f33f62be948455a3ef124c7c8d7680f81b2
Sha384
ec6824536856d9d5556dbf394636afa59e3cac8a7e9311de7d474a517a6227adf55c37488cccfd7ac60060cae684f638
Sha512
c29272fb0c702f91d703262769124c204c1cdd8e78a0b7ba05956e4ca9d29542c97c6c51c656afe7f75511955ca16404971215740d3c95b7b4ee452ae0aeb210
SSDeep
12:5jd/uX/NMIFKCq12me3hM6UQU2zpLHgxv8eBuozCl7XMGLuH8Gz/XXwaoAt:9d2vNMIHskhMIU2FLAxYozCpXt6pzfcA
TLSH
62F0470F6F899410E51EC8F8B3530663E6453555F25D8D7F853AD459044814EEA5D4F3
3 malicious · 3 files
ZIPea9fda8b4dc6b10625b0e87a1dea3f2eT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKDOC-572VBP.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
arc:zip>lnk~T1059.003~T1202~T1204.002
Shape
arc:zip>lnk
malicious
2 nodes
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential3 malicious · 3 files
ZIPea9fda8b4dc6b10625b0e87a1dea3f2eT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKDOC-572VBP.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
No malware configuration was found at this point.
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
ea9fda8b4dc6b10625b0e87a1dea3f2e › DOC-572VBP.lnk
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with EssentialSign in or create a free account to view the matching YARA rules.
Create a free account