Malicious
ZIP Archive
MD5: eccf78e542305277b9b701eb852ce91e
Size: 590 B
application/zip
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
ZIP archive
Size
590 B · 590 B
First seen
2026-08-03 10:50 · 2 months ago
Last seen
2026-08-03 10:50 · 2 months ago
Last analysis
2026-08-03 10:50 · 2 months ago
Hashes
MD5
eccf78e542305277b9b701eb852ce91e
Sha1
4e080c7e4ab869c46bad78b994ddddf02f89b7ac
Sha256
77e5499ed458e113bdf98b0630522e839dc6ed9bf515141fc682c00ab50b9299
Sha384
f105b8acedfdcd14350ebf365dae1eb77a9cdda40b78954c9561c1786da68d5185d9da64e7f365822e8b4aac24b20dd9
Sha512
bc58f5ef1707bb5f060b0eaed02cfc8e2945184ccaca73b537180431c1a24010f8e7d06b5fdc6024c875e87161a791da671a13b87a3891276fb953e7c954789a
SSDeep
12:5jHNRZITpQk6hu2W2IpBStYOoRJQZ2Asd/33PecDtEqfYzitl1vIGUJVi6xNYqi0:9HNfGzgDSTSWrQZ2JdfDWitl1vI/VVxz
TLSH
AAF0418026292A5ADC02DAFF449EFE1F0F150D6A154903964F16D6CF82E817D196CF36
3 malicious · 3 files
ZIPeccf78e542305277b9b701eb852ce91eT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKDOC-B073ZI.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
arc:zip>lnk~T1059.003~T1202~T1204.002
Shape
arc:zip>lnk
malicious
2 nodes
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential