Malicious
d79c6f4f95c09d8939e3b171591a088a
ZIP Archive
MD5: d79c6f4f95c09d8939e3b171591a088a
Size: 977 B
application/zip
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
ZIP archive
Size
977 B · 977 B
First seen
2026-08-04 08:05 · 2 months ago
Last seen
2026-08-04 08:05 · 2 months ago
Last analysis
2026-08-04 08:05 · 2 months ago
Hashes
MD5
d79c6f4f95c09d8939e3b171591a088a
Sha1
bea31e96165217864b723bc6cb10c082245ac709
Sha256
6f2d0366785a1b359d50f549ed7be8c6d83147628989f74e5b70e394b2b870df
Sha384
5b0ae777b147006411daed272355d34ca6db3480bfae50eb7a2963a7196a0db0b1ddb1bc77473c52cb8e86ce13a1acd7
Sha512
ba6be7d90f20dad7efb37a4241e7c0577127d6f28e89f0d8d78f25957f3896c6bcc596c2af98ded07ba19a7ab1f671efd0cb3a5d3778d1df63d7b63e745caa3d
SSDeep
24:9GFQ990KOsGse0WcYSS4PVM4kGr/p3RB1gMF80Ig9:92Q/0Hse0WX/4kWRBD780x9
TLSH
241194F4A2896F6CC615DA347025270E6D0923250824BE243A6862696E5C0C8BAAC191
3 malicious · 3 files
ZIPd79c6f4f95c09d8939e3b171591a088aT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKDOC-UFEBMS.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
arc:zip>lnk~T1059.003~T1202~T1204.002
Shape
arc:zip>lnk
malicious
2 nodes
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential3 malicious · 3 files
ZIPd79c6f4f95c09d8939e3b171591a088aT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKDOC-UFEBMS.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
No malware configuration was found at this point.
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
d79c6f4f95c09d8939e3b171591a088a › DOC-UFEBMS.lnk
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with EssentialSign in or create a free account to view the matching YARA rules.
Create a free account