Malicious
9002aa2ab0fec9943b0fbf83ef09e53e
ZIP Archive
MD5: 9002aa2ab0fec9943b0fbf83ef09e53e
Size: 581 B
application/zip
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
ZIP archive
Size
581 B · 581 B
First seen
2026-08-03 13:02 · 2 months ago
Last seen
2026-08-03 13:02 · 2 months ago
Last analysis
2026-08-03 13:02 · 2 months ago
Hashes
MD5
9002aa2ab0fec9943b0fbf83ef09e53e
Sha1
dc296aa2d39c460f5079c1fc2c8507285c3ccb01
Sha256
ddab3d5bb955353115b01acd82ffcf2e7227a9ab3921dc265d8c5053b60f2305
Sha384
0619c36b863aabe6e8783d7c0a007ebea4a6a22bfbae590edb5c8458075eae5119c1f6351e365bf9750ed2f8f8d520d3
Sha512
6f43c6f8f45924085697be54818e55e596e868110e7fb8486877071443c79c66ea34f9b67e88fa83bd9eb153ac90aba4629b4be34a9aa845171542bf1ba0a917
SSDeep
12:5jaac589r9PlUBJfXBpRMi/9qZeIt61LD+NcahjXbMlaoT:9aa2ugBpR9VayYFbMDT
TLSH
0FF075BF120994DADFCB34BB34963732331835142CAE6D13560CC0C55CCF6B8829C468
3 malicious · 3 files
ZIP9002aa2ab0fec9943b0fbf83ef09e53eT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKDOC-DHHMCO.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
arc:zip>lnk~T1059.003~T1202~T1204.002
Shape
arc:zip>lnk
malicious
2 nodes
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential3 malicious · 3 files
ZIP9002aa2ab0fec9943b0fbf83ef09e53eT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKDOC-DHHMCO.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
No malware configuration was found at this point.
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
9002aa2ab0fec9943b0fbf83ef09e53e › DOC-DHHMCO.lnk
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with EssentialSign in or create a free account to view the matching YARA rules.
Create a free account