Malicious
3648f36d6efccc3288d6213837a6b2fd
ZIP Archive
MD5: 3648f36d6efccc3288d6213837a6b2fd
Size: 579 B
application/zip
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
ZIP archive
Size
579 B · 579 B
First seen
2026-08-03 10:31 · 2 months ago
Last seen
2026-08-03 10:31 · 2 months ago
Last analysis
2026-08-03 10:31 · 2 months ago
Hashes
MD5
3648f36d6efccc3288d6213837a6b2fd
Sha1
d46622146b5e4e3cb66799e2bf6df925c3c6ef0b
Sha256
c35f0adffc8252c1da3ee7af8a1ee750c645e9977721e046a2e6dd223ce1692f
Sha384
399b46d07a50691fb2b67a74d2ee36313b30c8dedf4c2ef8caa60521ce098f6e79eded95c0fa495a78316eb64ba5b771
Sha512
1c554c726ffc6b9e119c36c9304df459762557cbcd17c028b8017f4fde9044bb69b871867f90cd64df03f667fff06c0e3d4bef98c87523200bd87e737f95e162
SSDeep
12:5jkkKq5xDuljian51wfayhPM1lO+rn0bx2n1KK+pcMzctF78v5mcWk/q56aoF/:9nKqbSE81KhPMlprn012kKHMzckv5mcH
TLSH
E1F0E136919AE00FC248F4B5613125CCC158921808AF9120531BE56C0CB21F4BD59990
3 malicious · 3 files
ZIP3648f36d6efccc3288d6213837a6b2fdT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKDOC-79ZRGH.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
arc:zip>lnk~T1059.003~T1202~T1204.002
Shape
arc:zip>lnk
malicious
2 nodes
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential3 malicious · 3 files
ZIP3648f36d6efccc3288d6213837a6b2fdT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKDOC-79ZRGH.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
No malware configuration was found at this point.
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
3648f36d6efccc3288d6213837a6b2fd › DOC-79ZRGH.lnk
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with EssentialSign in or create a free account to view the matching YARA rules.
Create a free account