Malicious
ef11c974fbaafd2d6d57cada117a13c3
ZIP Archive
MD5: ef11c974fbaafd2d6d57cada117a13c3
Size: 597 B
application/zip
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
ZIP archive
Size
597 B · 597 B
First seen
2026-08-03 11:25 · 2 months ago
Last seen
2026-08-03 11:25 · 2 months ago
Last analysis
2026-08-03 11:25 · 2 months ago
Hashes
MD5
ef11c974fbaafd2d6d57cada117a13c3
Sha1
83868cf35613063e7d68e10bbbf91f9ea251fc9a
Sha256
92aef1fdd385b60a9d35e9bc11294bdffafc0e5dd92ac1b6b471db3df9966859
Sha384
8dcd844c9f05c1806e6d6b99a6f30c4bce4fc4710b80af7c02ff50ad5272f20d40d225b065d36fac9293ad5c5f3365cf
Sha512
f183b0525a5bf0a6c97efbcd4af5dfc0972d8722456ac466b9c2c733344f1a088e0edc30b1d35bffbc2636e744a95ae55a47af379b57345dcbe7e4db71253cf1
SSDeep
12:5jR0fb7T3Fgeyfbt98xcwLbjbGfvoUNCVOOD+Ls4U4Z9p5mF70fb0NaoQ/:9RI75EOBXbGfvb1OD+LsZ4Zvy7IaQ
TLSH
B4F04133905D549FC1DFDD397223BA3106E0A0A643CF7586FA05A329B245A852215428
3 malicious · 3 files
ZIPef11c974fbaafd2d6d57cada117a13c3T1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKDOC-4H1R2S.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
arc:zip>lnk~T1059.003~T1202~T1204.002
Shape
arc:zip>lnk
malicious
2 nodes
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential3 malicious · 3 files
ZIPef11c974fbaafd2d6d57cada117a13c3T1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKDOC-4H1R2S.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
No malware configuration was found at this point.
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
ef11c974fbaafd2d6d57cada117a13c3 › DOC-4H1R2S.lnk
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with EssentialSign in or create a free account to view the matching YARA rules.
Create a free account