Malicious
f25bfb66699abd5c801a3cfdb8794e6d
ZIP Archive
MD5: f25bfb66699abd5c801a3cfdb8794e6d
Size: 907 B
application/zip
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
ZIP archive
Size
907 B · 907 B
First seen
2026-08-03 13:38 · 2 months ago
Last seen
2026-08-03 13:38 · 2 months ago
Last analysis
2026-08-03 13:38 · 2 months ago
Hashes
MD5
f25bfb66699abd5c801a3cfdb8794e6d
Sha1
6585ff4aa3686b85b5679abdcfc4eb3dace1d220
Sha256
5a1b6f1a840f29d89007e222558af17e52f07a95b74aad6271f11ea2cf109ea3
Sha384
6c0035211c548aabd88a252c7504af36117cb8076c68154548f44bf084cbe5587a745b0943473bff73ed4f7b869ba0ed
Sha512
ef30b07f5009e10ef8805324467d7d68cbb00b1db4e318bb94bd1d9aa0ed6f378be4bd43e53b426a740e7aa1fb8c10a6f4e808306fb0863b8854fc4dd6717f97
SSDeep
24:9pkO7U3IiLcTzLiX6sKvXWs9pzMbeDY+O/7NH:9mO7Oc3rzvLYh7NH
TLSH
CA11C4DBAB4691A1C39F40FBB9D6D4E6C4203040018F48A36A86F007092E8EA6AC3464
3 malicious · 3 files
ZIPf25bfb66699abd5c801a3cfdb8794e6dT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKDOC-854P04.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
arc:zip>lnk~T1059.003~T1202~T1204.002
Shape
arc:zip>lnk
malicious
2 nodes
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential3 malicious · 3 files
ZIPf25bfb66699abd5c801a3cfdb8794e6dT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKDOC-854P04.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
No malware configuration was found at this point.
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
f25bfb66699abd5c801a3cfdb8794e6d › DOC-854P04.lnk
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with EssentialSign in or create a free account to view the matching YARA rules.
Create a free account