Malicious
eb9fbcbaac0bfa850e9139206537b0a2
ZIP Archive
MD5: eb9fbcbaac0bfa850e9139206537b0a2
Size: 958 B
application/zip
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
ZIP archive
Size
958 B · 958 B
First seen
2026-08-04 08:37 · 2 months ago
Last seen
2026-08-04 08:37 · 2 months ago
Last analysis
2026-08-04 08:37 · 2 months ago
Hashes
MD5
eb9fbcbaac0bfa850e9139206537b0a2
Sha1
8742375773350eba5e52e14285d6499fbb0ff0e9
Sha256
8984714c57bf16da4f2ba1d96adb2d2887528bb7ad2a7688ae56ef157d9ec41f
Sha384
bc82d7fdcf638a3aa72c654e26d55d305bfdfff1bfd4af976cdde2de768ab8f66045c646ddf467903376ad9e126cab0e
Sha512
4b2f050493095f15cbf2d2c8f253b378c4cf7748974cffd22f5218410ef41bdef8f7e646447358a4c1a379a66ead7da1cdbc7415ca97c05a26390807b0268896
SSDeep
24:9se0YGcJlAhjtdT/uhLabqmEF4fL9wGkCaAiE6uo:9sbGJqhjraLab1EGT9r1aAl6uo
TLSH
4811C86B8B78DDA0CA07E53EE3B12A2C7E0E5246140854599089F2761E0D1415587254
3 malicious · 3 files
ZIPeb9fbcbaac0bfa850e9139206537b0a2T1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKDOC-8A1K9V.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
arc:zip>lnk~T1059.003~T1202~T1204.002
Shape
arc:zip>lnk
malicious
2 nodes
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential3 malicious · 3 files
ZIPeb9fbcbaac0bfa850e9139206537b0a2T1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKDOC-8A1K9V.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
No malware configuration was found at this point.
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
eb9fbcbaac0bfa850e9139206537b0a2 › DOC-8A1K9V.lnk
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with EssentialSign in or create a free account to view the matching YARA rules.
Create a free account