Malicious
ec2363e7568cff851c80f510aba78f32
ZIP Archive
MD5: ec2363e7568cff851c80f510aba78f32
Size: 587 B
application/zip
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
ZIP archive
Size
587 B · 587 B
First seen
2026-08-03 11:11 · 2 months ago
Last seen
2026-08-03 11:11 · 2 months ago
Last analysis
2026-08-03 11:11 · 2 months ago
Hashes
MD5
ec2363e7568cff851c80f510aba78f32
Sha1
71dbdcb954be6863b847f8962e23980484665239
Sha256
d899477753b0a4aca2c432c6baf9681e9453ca15c6776e70597be38b3cf83574
Sha384
18c281494b30ef7cff98ec4387ccaca9b53fca6473d03efbf230c42294790524edce995059d62dfcfa9295a8aa0e97fe
Sha512
5fa88b75d44e8da987277117c7eafb6fb21b6456d9e52182714615e2cf679624e041bf738669c3a994f5c5644658899ac5dd977afbe27ef2cd485152911a347c
SSDeep
12:5jFjL1sErDKfBS5pkovaV5h1iMYvdN9XK8DJr6+NBjycaol:9FjLmEMipM9ihdHXKKzBjyIl
TLSH
66F0475261118534C11ED635DCA35139D1B874498515055F0747DB8F4E211B3AB2C6C2
3 malicious · 3 files
ZIPec2363e7568cff851c80f510aba78f32T1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKDOC-49N3MP.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
arc:zip>lnk~T1059.003~T1202~T1204.002
Shape
arc:zip>lnk
malicious
2 nodes
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential3 malicious · 3 files
ZIPec2363e7568cff851c80f510aba78f32T1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKDOC-49N3MP.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
No malware configuration was found at this point.
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
ec2363e7568cff851c80f510aba78f32 › DOC-49N3MP.lnk
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with EssentialSign in or create a free account to view the matching YARA rules.
Create a free account