Malicious
ZIP Archive
MD5: ecf97a083a78351f9cde2b54d39eb946
Size: 987 B
application/zip
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
ZIP archive
Size
987 B · 987 B
First seen
2026-08-03 13:37 · 2 months ago
Last seen
2026-08-03 13:37 · 2 months ago
Last analysis
2026-08-03 13:37 · 2 months ago
Hashes
MD5
ecf97a083a78351f9cde2b54d39eb946
Sha1
b34c9287194f9416f9ae8963aec3d67da1610112
Sha256
a16cdf2f01e382ac2c1993a8fd6ab0d8923520889d6ce501c1a932ed1dc46aa5
Sha384
4e0d7a0b736d9b90542e8643a3e0b7679e381e2b9dda501f67914a96f59e1171b29b87b5cc454017f5f344d87e3cce6a
Sha512
99dfd04c2b594ae5fffffba1fb8c196dd6041a73f7af7ed63b5c5db4e5e025d4d6fd72c950de059d935787374b654b82f0ee38440ef2ddcff3ca269d0d539e6a
SSDeep
24:9zbssy1WhnDOUYTcOp4JaCnJLnIutiHt6B7f/:9zbsdkOUicOsHpPpB7f/
TLSH
1611C86764A74E11C330837C5966FCD79624F9B23609E84FAB1CD85C4C06A441CCB4D5
3 malicious · 3 files
ZIPecf97a083a78351f9cde2b54d39eb946T1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKDOC-0CYT6O.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
arc:zip>lnk~T1059.003~T1202~T1204.002
Shape
arc:zip>lnk
malicious
2 nodes
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential