Malicious
edf863cda50eb51d5005f78f5ffa1ff4
ZIP Archive
MD5: edf863cda50eb51d5005f78f5ffa1ff4
Size: 1.01 KB
application/zip
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
ZIP archive
Size
1.01 KB · 1,013 B
First seen
2026-08-03 13:38 · 2 months ago
Last seen
2026-08-03 13:38 · 2 months ago
Last analysis
2026-08-03 13:38 · 2 months ago
Hashes
MD5
edf863cda50eb51d5005f78f5ffa1ff4
Sha1
eba59f0e5219ed3e0bc88f90788302bd2384d474
Sha256
28a87295ef57a48bfddc4f84d05dbf81cd3c3e879120978fb3e3360a152b5eba
Sha384
61b6f385d082f54de4f2ef8397f94e83fabef609b30369d8920e4aab31e92f1c4db169ab205ebf4845b7efc31756e1aa
Sha512
afa3f50d09bbd3bebb645cdcd30b11f825029e6191260cbd346dc2275a96967237d982aecfbfba513bd48249ac3f76d44aadc379342a51b0e80a265c257cb5d1
SSDeep
24:950cguYbCV2XWkJje8o0prw46oaGq3Cw7XvXuMIauiH8XB:9CbCVWJaUrD1O+auiKB
TLSH
B811D8B2331D96B0C819DDB174F112F720B1818F454679376C8044F724810C3363A443
3 malicious · 3 files
ZIPedf863cda50eb51d5005f78f5ffa1ff4T1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKDOC-4DXZ0F.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
arc:zip>lnk~T1059.003~T1202~T1204.002
Shape
arc:zip>lnk
malicious
2 nodes
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential3 malicious · 3 files
ZIPedf863cda50eb51d5005f78f5ffa1ff4T1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKDOC-4DXZ0F.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
No malware configuration was found at this point.
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
edf863cda50eb51d5005f78f5ffa1ff4 › DOC-4DXZ0F.lnk
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with EssentialSign in or create a free account to view the matching YARA rules.
Create a free account