Malicious
985dc4d39451b54c7b67bea803f49015
ZIP Archive
MD5: 985dc4d39451b54c7b67bea803f49015
Size: 589 B
application/zip
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
ZIP archive
Size
589 B · 589 B
First seen
2026-08-03 13:33 · 2 months ago
Last seen
2026-08-03 13:33 · 2 months ago
Last analysis
2026-08-03 13:33 · 2 months ago
Hashes
MD5
985dc4d39451b54c7b67bea803f49015
Sha1
5fae1120a6189a937b1d7a09febffc346f0a01e8
Sha256
cf5e0479978712ad455809255f397f1cccf98465f88f9d1b8ea9de99621f058d
Sha384
18b01092241c28055ad42f10a7b6f2caded06f13497865d0be0a98ada68da9674752408d33a7636fc799ce7f70558dca
Sha512
56f32e14ef49c3de503d75c8341a54750b582f7861446b0ac2222a1f251e12ff6dfc6e7295d13138e9272f92d5a83264b2f4d67d417ccfb1fcb0fd4cebf77818
SSDeep
12:5jGByBu7ozuDCwACq6K5Knq4gr4llpVs6u+ZB6SdBhwaor:9GByBuM6mpCbHgMBVQ+S0BhMr
TLSH
4DF0963208380DC8C993C43170B839F9C4D6503200135DDF06D9DE06D4F459930043E6
3 malicious · 3 files
ZIP985dc4d39451b54c7b67bea803f49015T1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKDOC-QDBYUQ.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
arc:zip>lnk~T1059.003~T1202~T1204.002
Shape
arc:zip>lnk
malicious
2 nodes
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential3 malicious · 3 files
ZIP985dc4d39451b54c7b67bea803f49015T1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKDOC-QDBYUQ.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
No malware configuration was found at this point.
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
985dc4d39451b54c7b67bea803f49015 › DOC-QDBYUQ.lnk
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with EssentialSign in or create a free account to view the matching YARA rules.
Create a free account