Malicious
d380e28764cee781be3fdb8eebcd4a95
ZIP Archive
MD5: d380e28764cee781be3fdb8eebcd4a95
Size: 839 B
application/zip
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
ZIP archive
Size
839 B · 839 B
First seen
2026-08-03 10:54 · 2 months ago
Last seen
2026-08-03 10:54 · 2 months ago
Last analysis
2026-08-03 10:54 · 2 months ago
Hashes
MD5
d380e28764cee781be3fdb8eebcd4a95
Sha1
56500c0453b6b7435705d20d99f376fc9bd6813f
Sha256
7a21f090bb34e19ed1ff241d5aa04e197499f4a5674faba919b4fdb3f1abae61
Sha384
0e38fb8e8cbf2874b4f5d7814e53bfb9f6a9ae13aef38fc1f89bcf30d79ff08dcea74fc8f4e6af9cf2c461692291967c
Sha512
2e53de77a0dc547bbd81ab86c4e337fca49a7d3351b6a6444cdb55563dc45ab56d19aad9acd4f290335e987dfdba6006155853c47332390489aa4ea30d3afc4d
SSDeep
24:9K5i1C1pcyWwuu8treSxYpEfKGCSRE3TlzS:9KL+reALyGhGhzS
TLSH
3A0196E360312024CAE24D71B5202F46256E4407C90F58814C3AC2EF1CB9774B9770F6
3 malicious · 3 files
ZIPd380e28764cee781be3fdb8eebcd4a95T1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKDOC-DDQBB0.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
arc:zip>lnk~T1059.003~T1202~T1204.002
Shape
arc:zip>lnk
malicious
2 nodes
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential3 malicious · 3 files
ZIPd380e28764cee781be3fdb8eebcd4a95T1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKDOC-DDQBB0.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
No malware configuration was found at this point.
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
d380e28764cee781be3fdb8eebcd4a95 › DOC-DDQBB0.lnk
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with EssentialSign in or create a free account to view the matching YARA rules.
Create a free account