Malicious
ffe0f6cda440782fced58ee5e6d28360
ZIP Archive
MD5: ffe0f6cda440782fced58ee5e6d28360
Size: 837 B
application/zip
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
ZIP archive
Size
837 B · 837 B
First seen
2026-08-03 10:55 · 2 months ago
Last seen
2026-08-03 10:55 · 2 months ago
Last analysis
2026-08-03 10:55 · 2 months ago
Hashes
MD5
ffe0f6cda440782fced58ee5e6d28360
Sha1
6ff8ff14c333ef30d0110b0c04ec5efb71608ffb
Sha256
4d50c7fb23a8567aaaccabff15da42fa3521b421452c6c7b214dcc3fd4223f54
Sha384
485392bf4ec797202062876aac0361f6de1163edad752add760532ae5a2e4692a157836dc0f16a694f6e301f324aa897
Sha512
887f8e09e2cef25653119fc15d693863fac5be45e896b7cfaa2fcc131a8159ae0617d0e7664a9b92a267c7627c19e6455f3a26a8880ddf6a08e7ef3283d52527
SSDeep
24:9Pr9M/MN3fbv4L3WYK25IIY5bYvHVVo2hyK5OI2g:9D3fD+qsILCv1yKg1g
TLSH
170146D3C631C0A4E513E5BDB4D82C8DF0762624744B5614617E687DB8BC6DA45009EB
3 malicious · 3 files
ZIPffe0f6cda440782fced58ee5e6d28360T1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKDOC-13OZ0K.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
arc:zip>lnk~T1059.003~T1202~T1204.002
Shape
arc:zip>lnk
malicious
2 nodes
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential3 malicious · 3 files
ZIPffe0f6cda440782fced58ee5e6d28360T1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKDOC-13OZ0K.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
No malware configuration was found at this point.
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
ffe0f6cda440782fced58ee5e6d28360 › DOC-13OZ0K.lnk
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with EssentialSign in or create a free account to view the matching YARA rules.
Create a free account