Malicious
342a51bf7bfd54f0c0143b47dd694c62
ZIP Archive
MD5: 342a51bf7bfd54f0c0143b47dd694c62
Size: 933 B
application/zip
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
ZIP archive
Size
933 B · 933 B
First seen
2026-08-04 08:08 · 2 months ago
Last seen
2026-08-04 08:08 · 2 months ago
Last analysis
2026-08-04 08:08 · 2 months ago
Hashes
MD5
342a51bf7bfd54f0c0143b47dd694c62
Sha1
402325f27a8fc81906feaabaac556e31fa5a47e6
Sha256
85e2ba12d307d2ad55753e75d5e224e21922dd33b7149050043f3a5011e31c72
Sha384
ab1886acc61da24d7cff43823097ce61e10e4d1d8a08e941bbf564afa83a56b5d3f1fa6e3a59ee2e4942d2d3a6570cd8
Sha512
901718b14510dbfb40f88f024ea5bc2913eff74d453c616a00531936326565c7a73e1daad99f9e321deb4482c64ed48bce8612ea7df3f1676031ece5c3913f7a
SSDeep
24:9ILvO3Oc/DAJ/btsVGwtgSDKgeaLS727Tt:9I0/DAJhs7gki27Tt
TLSH
6511C4D162278017C69DC6B06BB825AED024E22481CB7C6200E9F30B19F6AA74820E80
3 malicious · 3 files
ZIP342a51bf7bfd54f0c0143b47dd694c62T1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKDOC-RRPWO3.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
arc:zip>lnk~T1059.003~T1202~T1204.002
Shape
arc:zip>lnk
malicious
2 nodes
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential3 malicious · 3 files
ZIP342a51bf7bfd54f0c0143b47dd694c62T1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKDOC-RRPWO3.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
No malware configuration was found at this point.
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
342a51bf7bfd54f0c0143b47dd694c62 › DOC-RRPWO3.lnk
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with EssentialSign in or create a free account to view the matching YARA rules.
Create a free account