Malicious
ed823ab0d2d184727b627f5dda803a79
ZIP Archive
MD5: ed823ab0d2d184727b627f5dda803a79
Size: 579 B
application/zip
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
ZIP archive
Size
579 B · 579 B
First seen
2026-08-03 13:07 · 2 months ago
Last seen
2026-08-03 13:07 · 2 months ago
Last analysis
2026-08-03 13:07 · 2 months ago
Hashes
MD5
ed823ab0d2d184727b627f5dda803a79
Sha1
1653eaa85361105e2c150831036b0b3414ed5ca0
Sha256
f07612cefa4429ae2012b0ac8aa8574205a668e6639dc43b227e64ef2ffdd0b8
Sha384
8701be1bf5b5abb806e8f15f0274d84bdeefdaec73ab963e923cef5fb54b6ab323f684e7d6023ad3c792330fd232e607
Sha512
30b907dc2cbb191155b2f388724e9e931323846e7b9744b6ec104789994aac6151957a7c050de94bb6c5110dcd2dc2a2113cf2624b1a6477fa955466da1b8b65
SSDeep
12:5jb0iOCR2ko2qhnftKz2dEBvh9mFMWYHD7iI7tMQB2gkxdDd7Nv+mrcnBV0id6aK:94iOCMkorKvmhY6I7tFB2VDWmInBiids
TLSH
58F041B5E258722AD1055876EBB01BA012620383C40EB162A098CC88232CAF4BE083A0
3 malicious · 3 files
ZIPed823ab0d2d184727b627f5dda803a79T1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKDOC-6VPSGF.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
arc:zip>lnk~T1059.003~T1202~T1204.002
Shape
arc:zip>lnk
malicious
2 nodes
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential3 malicious · 3 files
ZIPed823ab0d2d184727b627f5dda803a79T1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKDOC-6VPSGF.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
No malware configuration was found at this point.
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
ed823ab0d2d184727b627f5dda803a79 › DOC-6VPSGF.lnk
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with EssentialSign in or create a free account to view the matching YARA rules.
Create a free account