Malicious
d6f44c2ab9b16b09a697acab6b5e20d2
ZIP Archive
MD5: d6f44c2ab9b16b09a697acab6b5e20d2
Size: 909 B
application/zip
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
ZIP archive
Size
909 B · 909 B
First seen
2026-08-03 13:38 · 2 months ago
Last seen
2026-08-03 13:38 · 2 months ago
Last analysis
2026-08-03 13:38 · 2 months ago
Hashes
MD5
d6f44c2ab9b16b09a697acab6b5e20d2
Sha1
56de65025ef7f0c3ab7fbf776f5af51a7ec43d68
Sha256
542c98536dc9beddd430b741c7488f176737f806ea673123c7a91e7150dacb68
Sha384
552e5cd23bc69f0da10a1880beed53471aede48bae93fbd4230dee9aee2fa610a27cfe68b254e00e66a50f2154a137d4
Sha512
4c73bca3a995db9a7f81b5f623fb2f8329111063797f8a0d34d88b00c27c48d2a706692bdb506d44db3c10ad854f4355ce218960185afa4a8fe24d8fb6461461
SSDeep
24:9W3aI3k0kOmO5kSQolli//+n2StHlei4g+a38ng347t:9E00vmO6SllM//+nfllei4g+a38n247t
TLSH
8A1163B6A6CE1910D24CA1A4C882390221386A5943649762966E9F9FECA7D662F2131B
3 malicious · 3 files
ZIPd6f44c2ab9b16b09a697acab6b5e20d2T1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKDOC-0RCJZQ.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
arc:zip>lnk~T1059.003~T1202~T1204.002
Shape
arc:zip>lnk
malicious
2 nodes
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential3 malicious · 3 files
ZIPd6f44c2ab9b16b09a697acab6b5e20d2T1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKDOC-0RCJZQ.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
No malware configuration was found at this point.
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
d6f44c2ab9b16b09a697acab6b5e20d2 › DOC-0RCJZQ.lnk
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with EssentialSign in or create a free account to view the matching YARA rules.
Create a free account