Malicious
c1d9ffedeb02c5d410c40c3e6a5d5702
ZIP Archive
MD5: c1d9ffedeb02c5d410c40c3e6a5d5702
Size: 857 B
application/zip
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
ZIP archive
Size
857 B · 857 B
First seen
2026-08-04 08:23 · 2 months ago
Last seen
2026-08-04 08:23 · 2 months ago
Last analysis
2026-08-04 08:23 · 2 months ago
Hashes
MD5
c1d9ffedeb02c5d410c40c3e6a5d5702
Sha1
cce706f891bb58e9b74d2e6a037b7aaabf53c5a5
Sha256
e3d67f20b531db6f161a3b0c8d7f97420d8386ac6dfb06389f0beeb0db30d593
Sha384
ed895c46d8e8fb24f61b2b257edf38752a1f12d4c5683fd71e39cf1ece74c757db59de03177f4a135ad7a4114e7a9b1c
Sha512
5241da7707706d77558fe81df17635eccb14f8c752c77fa93cdcad52ac9614f89c8b6d82dbb28b00e6022f98b8e6ec8dd54a7bd09b62325b9024a7d243e4e769
SSDeep
24:9u1+/dOkl4uORzSmrMNYS4Ju1P1nAuFjCV:9a+/dOWSBSmrMNYS6u/AMWV
TLSH
541152FBE314E600E3ACD37A94284A8E23762C821C1BD621F919D62A10195D286EF07C
3 malicious · 3 files
ZIPc1d9ffedeb02c5d410c40c3e6a5d5702T1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKDOC-DWW91I.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
arc:zip>lnk~T1059.003~T1202~T1204.002
Shape
arc:zip>lnk
malicious
2 nodes
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential3 malicious · 3 files
ZIPc1d9ffedeb02c5d410c40c3e6a5d5702T1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKDOC-DWW91I.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
No malware configuration was found at this point.
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
c1d9ffedeb02c5d410c40c3e6a5d5702 › DOC-DWW91I.lnk
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with EssentialSign in or create a free account to view the matching YARA rules.
Create a free account