Malicious
ef744008c494ac7cb3a38bdc34f376cf
ZIP Archive
MD5: ef744008c494ac7cb3a38bdc34f376cf
Size: 840 B
application/zip
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
ZIP archive
Size
840 B · 840 B
Hashes
MD5
ef744008c494ac7cb3a38bdc34f376cf
Sha1
3d35cecdd1cea17b04cdabfed42871099b6f4e7e
Sha256
83d11bd5843ee016fa08acb0cec1a9adf57458921cfda38b7f9902c4c88dbffb
Sha384
5da49908835921569ad8de4b47d061e88e1130dd3e991a8f66355de383d41eacc2dd207236bd9deafaf7d3a22a85a5c6
Sha512
610296aff387eec0f3a5eacbdc2511e37cc10896c36017a533662d7daecc784a6c475154247a1514c5e1a0df98b386dde6a5cdabe086573076d9efe137340fc0
SSDeep
24:9fp6OzqGMkMWpLjMZrUYNi9mwKSw4t1MppYoUDRwvkfcpeb:9NGGMM8ZHlZEC8E0b
TLSH
1D015633F1466410F5D427FCB040E28C41B3B644094781B4D5A6A9EABC486E14E15D2E
3 malicious · 3 files
ZIPef744008c494ac7cb3a38bdc34f376cfT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKDOC-0WO94A.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
arc:zip>lnk~T1059.003~T1202~T1204.002
Shape
arc:zip>lnk
malicious
2 nodes
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential3 malicious · 3 files
ZIPef744008c494ac7cb3a38bdc34f376cfT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKDOC-0WO94A.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
No malware configuration was found at this point.
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
ef744008c494ac7cb3a38bdc34f376cf › DOC-0WO94A.lnk
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with EssentialSign in or create a free account to view the matching YARA rules.
Create a free account