Malicious
d4ddea85ab1ba9033fcbf4482a201f50
ZIP Archive
MD5: d4ddea85ab1ba9033fcbf4482a201f50
Size: 595 B
application/zip
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
ZIP archive
Size
595 B · 595 B
First seen
2026-08-03 13:23 · 2 months ago
Last seen
2026-08-03 13:23 · 2 months ago
Last analysis
2026-08-03 13:23 · 2 months ago
Hashes
MD5
d4ddea85ab1ba9033fcbf4482a201f50
Sha1
39e2e0c11a9ea79a83b36703e8b68daa7a9b77c3
Sha256
108b2d58bb2ea928eea7311630b76613eb6fd729ca25efc3f4cd5881bb1e2079
Sha384
95144bae3e70949db5dfbc1605508ad146afbd3d8ca82c20465afa8d2a7738a2f591c2e5d8067d5e808eeb9c2a48b84a
Sha512
d8d8c9c3794568886ca6ea44b127e50db4ec16eff20df74cc45f3f894ac2a6bf7c9a0c5b2c2e27672cf643525183d4b24502854cb1cf2209593cf6bab17453c4
SSDeep
12:5jfei5QQMzH4yvkvTfi+RYXUPE0C6ok8RUQzXjFSkE3Yu6ycYhdGm7BJ7xeifgLJ:9mAzKYyvgTamYXGToknQzzfE3edY2SZk
TLSH
7DF02616D6B35C7EC5655BBB00D3379E73956A11040663EC7D6BD2C238801D53A35931
3 malicious · 3 files
ZIPd4ddea85ab1ba9033fcbf4482a201f50T1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKNota_-KK4MNJ.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
arc:zip>lnk~T1059.003~T1202~T1204.002
Shape
arc:zip>lnk
malicious
2 nodes
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential3 malicious · 3 files
ZIPd4ddea85ab1ba9033fcbf4482a201f50T1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKNota_-KK4MNJ.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
No malware configuration was found at this point.
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
d4ddea85ab1ba9033fcbf4482a201f50 › Nota_-KK4MNJ.lnk
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with EssentialSign in or create a free account to view the matching YARA rules.
Create a free account