Malicious
eaa0a8a85392cddd9bb1f319199b5cf9
ZIP Archive
MD5: eaa0a8a85392cddd9bb1f319199b5cf9
Size: 582 B
application/zip
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
ZIP archive
Size
582 B · 582 B
Hashes
MD5
eaa0a8a85392cddd9bb1f319199b5cf9
Sha1
c6d89f860048747ac9172e4cc717767352140a63
Sha256
c0624524b704bb71548e3e64f176f569470ef1871dd7fecb21908d0ed43988fc
Sha384
135ac49f89d159a036d452c02998f9d1a4ca749b94b72c83b4ed4ce88d5c9afe5b6a9e64105d7d4ec23b569ca6e03adc
Sha512
059b0c1b8693e1e5ad7164794721c0ba14d52e63581890b14530acab7e9f00de12b46b1db266ec9d1eba8a6e7d8789f179cd2a679ea22aada8a5b182d90694a6
SSDeep
12:5jUGLsXpPLQZVFxXhkH3uwvT6iBkw5Y3P0z9gQTMC80B6Gziaoi:9DsZLQnWH3zvT6iDm0z9gQAGBZCi
TLSH
E7F0E11A8F2D8882DC0102B1378FAAAE122E3AC4881D2FD6CF69E44B1930069590A424
3 malicious · 3 files
ZIPeaa0a8a85392cddd9bb1f319199b5cf9T1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKDOC-9OSOCU.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
arc:zip>lnk~T1059.003~T1202~T1204.002
Shape
arc:zip>lnk
malicious
2 nodes
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential3 malicious · 3 files
ZIPeaa0a8a85392cddd9bb1f319199b5cf9T1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKDOC-9OSOCU.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
No malware configuration was found at this point.
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
eaa0a8a85392cddd9bb1f319199b5cf9 › DOC-9OSOCU.lnk
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with EssentialSign in or create a free account to view the matching YARA rules.
Create a free account