Malicious
ZIP Archive
MD5: ecbd5b26b4fa84e2e68b6c4c1c646ebd
Size: 587 B
application/zip
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
ZIP archive
Size
587 B · 587 B
First seen
2026-08-03 12:17 · 2 months ago
Last seen
2026-08-03 12:17 · 2 months ago
Last analysis
2026-08-03 12:17 · 2 months ago
Hashes
MD5
ecbd5b26b4fa84e2e68b6c4c1c646ebd
Sha1
7ebd1e3a690fee2d95c221b176f5c402d2bd200a
Sha256
1db37da8fb3f20e8e4a600a245ae8345dcee6130eea2aee57b99beefa9a27dc3
Sha384
7f62d06526720d89a621b402ad0528be18e6c343f9cf41248424495638af284e87322bd394a2d50742a889b86703df37
Sha512
26da2a4a26752b69d6d8dbc6e93260af4cf332641c84e45dea38c10b5187effb1ba9ba0f5bcf05d014d2c19946b5c168103a887ed19f5403c7447b97e382e4a7
SSDeep
12:5jRsm5QdUbmmAMtOBkit7RMrPbBL7CGpTkk/6YmmdtZFV7nXuaG:9Rsm5RFApv9OTbZGGpoFmdtZ/nXM
TLSH
80F041101404F711F8EFD27A638029080A44012B61CA858EDBF8E1AA0FD24A1BA13468
3 malicious · 3 files
ZIPecbd5b26b4fa84e2e68b6c4c1c646ebdT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKPDFDOC-FRZBMR.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
arc:zip>lnk~T1059.003~T1202~T1204.002
Shape
arc:zip>lnk
malicious
2 nodes
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential