Malicious
c64d1beefc9d9cf1d38e75ca3954a8ff
ZIP Archive
MD5: c64d1beefc9d9cf1d38e75ca3954a8ff
Size: 587 B
application/zip
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
ZIP archive
Size
587 B · 587 B
First seen
2026-08-03 10:29 · 2 months ago
Last seen
2026-08-03 10:29 · 2 months ago
Last analysis
2026-08-03 10:29 · 2 months ago
Hashes
MD5
c64d1beefc9d9cf1d38e75ca3954a8ff
Sha1
d57a7c0a2b29a3757122b84f716b405ebbf9b39e
Sha256
995ef399e788941d9c2c90a7991d6bbfd47431910e73b6d90bbfc34c2690c677
Sha384
6a4752d214b62058e1ced8a2bcbd49a0b888853b70b540cd8f99a923ae174655b530d1332a7bf71b86101f87149358d9
Sha512
c5e45023a87b5fc19300f13927dcea21b018b20fc718e2d13c55efcee3d2b208c9909dcc061063bf0073bf2eccfbfdaaf49cf8b58c58e0e13b65765890fbd44d
SSDeep
12:5j667dR/irbfmuFnsMmIpNw7019JgNtaG0NM8HTBvaU52kiT9vT6Paol:9667d1irblFnxmILY/NcfNM8HNCU52Xc
TLSH
86F041D2C1B24A24C013DD779C973280745C81D05A2D25BA8259D21A2D6470E38C38AC
3 malicious · 3 files
ZIPc64d1beefc9d9cf1d38e75ca3954a8ffT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKDOC-OVDFHL.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
arc:zip>lnk~T1059.003~T1202~T1204.002
Shape
arc:zip>lnk
malicious
2 nodes
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential3 malicious · 3 files
ZIPc64d1beefc9d9cf1d38e75ca3954a8ffT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKDOC-OVDFHL.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
No malware configuration was found at this point.
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
c64d1beefc9d9cf1d38e75ca3954a8ff › DOC-OVDFHL.lnk
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with EssentialSign in or create a free account to view the matching YARA rules.
Create a free account