Malicious
b3bff5ac8d0dfb2730d962d251cc928a
ZIP Archive
MD5: b3bff5ac8d0dfb2730d962d251cc928a
Size: 933 B
application/zip
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
ZIP archive
Size
933 B · 933 B
First seen
2026-08-03 11:07 · 2 months ago
Last seen
2026-08-03 11:07 · 2 months ago
Last analysis
2026-08-03 11:07 · 2 months ago
Hashes
MD5
b3bff5ac8d0dfb2730d962d251cc928a
Sha1
3b946a2188f0c5c31f8a97624767083bc678df74
Sha256
3175d4852645e1dff7b67d1a77593f55dc3eabe6a7e22393ff3f4f79d533f59b
Sha384
7a2bf908d7082e563dc0091a9cffad96d7a35d4a7193e537dac172b6f3819ed91c6a12ebff8c3b6b373e030cbba43652
Sha512
392b7dc3bd54d635db9e3ce5f55526ce3c5aab26d10d931c47fa0a21d4b938ae3c0e6b5a5df66717edd305f239e79809d6f26adc76a3c62a3e601b57dfb24416
SSDeep
12:5jNt0sV3Qw5TBdpdI+Q0PiJMDryEtAGEpiQ7k4zX49LcdZOSGVMusS6/fjILpDpS:9N1Vj5eeL+FFXXnDJfD2BrWaiYW39Tt
TLSH
0911C877F9C008DCD54590FD4C5D35892253D261196A79517516E6541C0C4CAB2EB018
3 malicious · 3 files
ZIPb3bff5ac8d0dfb2730d962d251cc928aT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKDOC-5OQLNP.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
arc:zip>lnk~T1059.003~T1202~T1204.002
Shape
arc:zip>lnk
malicious
2 nodes
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential3 malicious · 3 files
ZIPb3bff5ac8d0dfb2730d962d251cc928aT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKDOC-5OQLNP.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
No malware configuration was found at this point.
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
b3bff5ac8d0dfb2730d962d251cc928a › DOC-5OQLNP.lnk
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with EssentialSign in or create a free account to view the matching YARA rules.
Create a free account