Malicious
ZIP Archive
MD5: f8fbce3857522043e1daaca242d0efc4
Size: 18.45 KB
application/zip
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
ZIP archive
Size
18.45 KB · 18,451 B
First seen
2025-09-18 20:31 · one year ago
Last seen
2025-09-18 20:31 · one year ago
Last analysis
2025-09-18 20:37 · one year ago
Hashes
MD5
f8fbce3857522043e1daaca242d0efc4
Sha1
9f07aa9aa8b286ccd9d2bdd92f884a06e8066ff1
Sha256
75f535b11afd2495cfdeacfbd8851942fd3879b2dc798c0162389917fdff037e
Sha384
4df9741c75487324d923950ec013e7cc3d884608f491da43d1a5616de6e855137ff8b3bea1afac07af5c7e17aaf95097
Sha512
b8f060a0efe307414450925d889cc9d84eea017de910381e6b9efcc74109cfb15005bb57f8f3b9e8055eacdfc4fc54e09053c1fb5f6066aa3c17dffe82aa1413
SSDeep
48:KoPNwhfkmpy5NgPNwhfkm/XdRi/1oo/Ks:KoFwhfTVFwhf/RaoHs
TLSH
D882E0406BF45205F9B2BA3C6E36B640967B396CEE3DA7CC0249D1384831952D2F4F1B
7 malicious · 7 files
ZIPf8fbce3857522043e1daaca242d0efc4T1059.001 · T1059.003 · T1204.002LOLBin
LNKANKETA_SBU.docx.lnkT1059.001 · T1059.003 · T1204.002LOLBin
SHLNK CommandLine
PS1[Lnk Summary]
LNKVymogi.docx.lnkT1059.001 · T1059.003 · T1204.002LOLBin
SHLNK CommandLine
PS1[Lnk Summary]
LNK: Command Execution
UNKNWOWNmalicious
powershuhuhuhuhuhuhuhuhuhuhu
LNK: Command Execution
UNKNWOWNmalicious
powershuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential7 malicious · 7 files
ZIPf8fbce3857522043e1daaca242d0efc4T1059.001 · T1059.003 · T1204.002LOLBin
LNKANKETA_SBU.docx.lnkT1059.001 · T1059.003 · T1204.002LOLBin
SHLNK CommandLine
PS1[Lnk Summary]
LNKVymogi.docx.lnkT1059.001 · T1059.003 · T1204.002LOLBin
SHLNK CommandLine
PS1[Lnk Summary]
No malware configuration was found at this point.
LNK: Command Execution
UNKNWOWNmalicious
powershuhuhuhuhuhuhuhuhuhuhu
f8fbce3857522043e1daaca242d0efc4 › ANKETA_SBU.docx.lnk
LNK: Command Execution
UNKNWOWNmalicious
powershuhuhuhuhuhuhuhuhuhuhu
f8fbce3857522043e1daaca242d0efc4 › Vymogi.docx.lnk
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with EssentialSign in or create a free account to view the matching YARA rules.
Create a free account