Malicious
ZIP Archive
MD5: d7dd5ca239dd204fe8a51215028b9bd1
Size: 107.21 KB
application/zip
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
ZIP archive
Size
107.21 KB · 107,212 B
First seen
2026-07-12 10:31 · 3 months ago
Last seen
2026-07-12 10:31 · 3 months ago
Last analysis
2026-07-12 10:31 · 3 months ago
Hashes
MD5
d7dd5ca239dd204fe8a51215028b9bd1
Sha1
ef762657a3de5ab8632d13691592f5b86cda9c77
Sha256
d448dfee940f4cbb2c26702951998ebeda7d24f137047a10ea8fbcbb6a903fab
Sha384
bc23309015f979b376a7fda07dba5f9c6a928e7178dcf688244b24476b8d60506407ac1ebdde55e68f6f01624a1f21d6
Sha512
1a01176ee89e846ac81c364c0b633cf8d38fb4a12f73d0869d45b8a9c12e1cbaf8f71071bc072aa10215b371e3253b3205b81d507e744ef4ec1e247657672c1c
SSDeep
192:3cc5C3gfZJr5Gc5wjD9IurjD9IMcIAzPucB/CRc7dTXB2JD:3cc4QfZJr5GcuP9cIGuc5yc5TXB2JD
TLSH
A1A3103475D81019E1F3EF72ACF477C5AEABF677B9B2125D1850160A4912E80EE12B3B
13 malicious · 14 files
ZIPd7dd5ca239dd204fe8a51215028b9bd1T1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKProtokolZatrimannya.docx.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
TXTReadMe.txt
LNKScanPassportiv1.pdf.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
LNKScanPassportiv2.pdf.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
LNKScanPassportiv3.pdf.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
LNKScanPassportiv4.pdf.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
LNKSpisokZatrimanih.xlsx.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential