Malicious
3f9a2af6e52f5947df719bda3b2a52eb
ZIP Archive
MD5: 3f9a2af6e52f5947df719bda3b2a52eb
Size: 816 B
application/zip
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
ZIP archive
Size
816 B · 816 B
First seen
2026-08-03 10:54 · 2 months ago
Last seen
2026-08-03 10:54 · 2 months ago
Last analysis
2026-08-03 10:54 · 2 months ago
Hashes
MD5
3f9a2af6e52f5947df719bda3b2a52eb
Sha1
eb3bdb79ea2fa937959f324624f8c9ab9df5c63a
Sha256
e4d4dc5877723404c0a282eb981766eb4fef1631da2407515b1e714b68ea0d23
Sha384
59a3f8d02c19d4dd2c5ac052ecd3c3ba03f14d758375a13d11cb298ef7362a0c5600892e491329ed3a5bda3b8a999ac0
Sha512
cb9e9f0b5bda015af0286e9a04b8e9e6759744a081bb18c5679d311a76e5702432dbebe83a79c8e22f82ba01f6b539794b5ce8855e768df2a175aeb056eec775
SSDeep
24:9fQX45yPzBYpbTUVKvpCoPoyCkQwvM5nFxTkT:9fQVVGWKvpMplwv4xTkT
TLSH
600175C22E9C133AE736D0B432D9821EF4F54CC4C68F692E137CC40C580EB942748982
3 malicious · 3 files
ZIP3f9a2af6e52f5947df719bda3b2a52ebT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKDOC-RZCQRS.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
arc:zip>lnk~T1059.003~T1202~T1204.002
Shape
arc:zip>lnk
malicious
2 nodes
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential3 malicious · 3 files
ZIP3f9a2af6e52f5947df719bda3b2a52ebT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKDOC-RZCQRS.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
No malware configuration was found at this point.
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
3f9a2af6e52f5947df719bda3b2a52eb › DOC-RZCQRS.lnk
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with EssentialSign in or create a free account to view the matching YARA rules.
Create a free account