Malicious
efbbfbaeeb6806a77d0e911edaa37f8c
ZIP Archive
MD5: efbbfbaeeb6806a77d0e911edaa37f8c
Size: 960 B
application/zip
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
ZIP archive
Size
960 B · 960 B
First seen
2026-08-04 08:25 · 2 months ago
Last seen
2026-08-04 08:25 · 2 months ago
Last analysis
2026-08-04 08:25 · 2 months ago
Hashes
MD5
efbbfbaeeb6806a77d0e911edaa37f8c
Sha1
ba0132d790ac8783267b07b6cbbeb02979222e7b
Sha256
8c162d6d2b2f1ac6a33b618819fd9e7b5bfac6749939fe553aa49f86035fa824
Sha384
0306822e004da2cd2569c6da1af372e6090255b292dd9c8c53f61c170e8b8493ea701a7a243d3d4633d14917f4a01307
Sha512
0e72cc7c437695628e2a3cdd5b3886ea3633e031d305781e788f2860845e0182f02a6ca5c64cb9baaaf929dc6169f18c515dad37cc00e3c2f6f4fb179c47abc2
SSDeep
24:9jJOoGYezTT/fMVnk6qc6qiTn7WwAPoFiyy:94XzX/fcUcc8PCJy
TLSH
7A11C8E053E7CF0DCBE5883EA897973A455763C38039667D549BE3D24CA8CF086422B2
3 malicious · 3 files
ZIPefbbfbaeeb6806a77d0e911edaa37f8cT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKDOC-WV0QYN.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
arc:zip>lnk~T1059.003~T1202~T1204.002
Shape
arc:zip>lnk
malicious
2 nodes
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential3 malicious · 3 files
ZIPefbbfbaeeb6806a77d0e911edaa37f8cT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKDOC-WV0QYN.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
No malware configuration was found at this point.
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
efbbfbaeeb6806a77d0e911edaa37f8c › DOC-WV0QYN.lnk
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with EssentialSign in or create a free account to view the matching YARA rules.
Create a free account