Malicious
Malicious

d8ffa29c346cdbd18d8c3875fad60acd

ZIP Archive
MD5: d8ffa29c346cdbd18d8c3875fad60acd
Size: 584 B
application/zip

This sample is a 584 bytes ZIP Archive for which Malva.RE's static analysis did not establish a malicious verdict. Static analysis extracted 2 embedded or derived files. It matches 1 YARA rule. Observed behaviours map to MITRE ATT&CK T1059.003, T1202: INDIRECT COMMAND EXECUTION and T1204.002. The file was analysed statically: it was parsed and decompiled, never executed.

SHA256
5fd2f342cb05a5fa0c629c1468a60af9cd9b7e343daca793628544ffdbf42986
MD5
d8ffa29c346cdbd18d8c3875fad60acd
Verdict
Malicious
File type
ZIP Archive · 584 bytes
Category
LOLBin

Cite this report: https://app.malva.re/sha256/5fd2f342cb05a5fa0c629c1468a60af9cd9b7e343daca793628544ffdbf42986

Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential

File
Type
ZIP archive
Size
584 B · 584 B
First seen
2026-08-03 13:02 · 2 months ago
Last seen
2026-08-03 13:02 · 2 months ago
Last analysis
2026-08-03 13:02 · 2 months ago
Hashes
MD5 d8ffa29c346cdbd18d8c3875fad60acd Sha1 e52769f7dab19db19655451d109371b1def8fed3 Sha256 5fd2f342cb05a5fa0c629c1468a60af9cd9b7e343daca793628544ffdbf42986 Sha384 d62ef0977984c275631e0a44065f41d518fa7308362d05dfb5cc38835d745620d609f52e06b386f5ab3ac6aa53d9ab18 Sha512 1769c252e052f076a549053184c5b912eceee03990aac265a3fdbeb0c32f4706e97c51fc288d0fb49231ac4a46c50a60231c728123e0a09ce3483016ecdd52ff SSDeep 12:5j0ioVanp/Zjd4tiudxX4ju/R/exNybjpA2/5j8t5iibaoo:94i/ZyoQ4a/1exNG35j8bvo TLSH 76F0E1EABB6C6949D606DCB8E4FE761210A1C795265678282033D5F52019032481D053

3 malicious · 3 files
ZIPd8ffa29c346cdbd18d8c3875fad60acdLOLBin
LNKDOC-DYP6G5.lnkLOLBin
BIN[Lnk Summary]
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
Path arc:zip>lnk~T1059.003~T1202~T1204.002
Shape arc:zip>lnk
malicious 2 nodes

LNK: Command Execution UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential

3 malicious · 3 files
ZIPd8ffa29c346cdbd18d8c3875fad60acdLOLBin
LNKDOC-DYP6G5.lnkLOLBin
BIN[Lnk Summary]
No malware configuration was found at this point.

LNK: Command Execution UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
d8ffa29c346cdbd18d8c3875fad60acd › DOC-DYP6G5.lnk
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential
Sign in or create a free account to view the matching YARA rules. Create a free account
An error has occurred. This application may no longer respond until reloaded. Reload 🗙