Malicious
d350081319db5e462a14fe0c36759c2b
ZIP Archive
MD5: d350081319db5e462a14fe0c36759c2b
Size: 871 B
application/zip
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
ZIP archive
Size
871 B · 871 B
Hashes
MD5
d350081319db5e462a14fe0c36759c2b
Sha1
3902474031288c0b910b0438ad4e9ba3819fc4f4
Sha256
3ad6df27f9fe1e4ce650a5537b6973f7a873de3a5f5a112299e888c29464f528
Sha384
c75c36b2ac5c9cbcdc2f47bd33e749500162b2ce9fd14e1c74c362a788c4ddddaeb4a326a087661b3fda1082d930a1b3
Sha512
b74f4d545634c7dfa4c8b3391264728303ee945bf68672975da39492c7e8b0cb4f3119a7ffdb576a9533dfcc2a773baa4619df4dd865b9c2692d384f398209cb
SSDeep
24:9hIcHS3nRKmf/GTyxdgCavxbiD/jCpqpSlp4VLD:9BansE/G8dB1T04VLD
TLSH
391156FFCD662AD6E2C60DB2DCA49A1F90AC6416564DA542F40CA705951398547D2144
3 malicious · 3 files
ZIPd350081319db5e462a14fe0c36759c2bT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKDOC-4B4JR4.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
arc:zip>lnk~T1059.003~T1202~T1204.002
Shape
arc:zip>lnk
malicious
2 nodes
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential3 malicious · 3 files
ZIPd350081319db5e462a14fe0c36759c2bT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKDOC-4B4JR4.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
No malware configuration was found at this point.
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
d350081319db5e462a14fe0c36759c2b › DOC-4B4JR4.lnk
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with EssentialSign in or create a free account to view the matching YARA rules.
Create a free account