Malicious
d789afae3966b0fa643032eb6a79afd2
ZIP Archive
MD5: d789afae3966b0fa643032eb6a79afd2
Size: 591 B
application/zip
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
ZIP archive
Size
591 B · 591 B
First seen
2026-08-03 13:21 · 2 months ago
Last seen
2026-08-03 13:21 · 2 months ago
Last analysis
2026-08-03 13:21 · 2 months ago
Hashes
MD5
d789afae3966b0fa643032eb6a79afd2
Sha1
25e6f919c366565928a9dc1a28ff5fac709213d6
Sha256
4ea0069ea24347837210756c2f3e1b31ffcf6c9bc9cebcddd05abbacfb787dc5
Sha384
c938755328c9ba8688bbc8edee38530b1669e3fed26bf0c1b716287bbda2e1454ca0383cd99a00ca7045ee7f11181d73
Sha512
e98fbe3f86aeea3ce4523f25dfb14aa9e9cef8614a072235031b49cc362d2708f07be497cb6cd8e41b556d9526c9254e15dea7e5801eec952e4953081df03c0d
SSDeep
12:5j8akrZFWbArxf91GjA4EZmUjRpe1dz0sE/gG/RZNsqMBuD6aHaS:9CebA/mG27wBI8RZNsqMYz
TLSH
71F0419842BCC139C15BC9FA1CDC3E726F577CE004429D06A20EB9A37AA76C28E520A0
3 malicious · 3 files
ZIPd789afae3966b0fa643032eb6a79afd2T1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKnf_e_-NLASQS.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
arc:zip>lnk~T1059.003~T1202~T1204.002
Shape
arc:zip>lnk
malicious
2 nodes
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential3 malicious · 3 files
ZIPd789afae3966b0fa643032eb6a79afd2T1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKnf_e_-NLASQS.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
No malware configuration was found at this point.
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
d789afae3966b0fa643032eb6a79afd2 › nf_e_-NLASQS.lnk
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with EssentialSign in or create a free account to view the matching YARA rules.
Create a free account