Malicious
d9408802f570baaa0db390e8e544c2ef
ZIP Archive
MD5: d9408802f570baaa0db390e8e544c2ef
Size: 800 B
application/zip
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
ZIP archive
Size
800 B · 800 B
Hashes
MD5
d9408802f570baaa0db390e8e544c2ef
Sha1
d070f9572afa77c2652797c645db9a2ce1963f38
Sha256
0dc7fc3201d9a63da26b66b24b0bc9cde75277bed31f04382968259ad5f15bd9
Sha384
748403b6cb880b06a7ca379833a2c4a1111ea0e02ef19b68078bbc9d7e1cf1f78ea4b6fb47ac68e47364895a1ded2874
Sha512
e3b4f35f75102b803c64dc774f135e2f712761f28045c2e4b6bd06ccc5a60bbf6e3f8d66051baa5d80cedb637f90abf833e6691dfb0b7ef068f2fd665b02d11a
SSDeep
24:9Dw45HE4SGWD88zDlCnAolUy9Zgo9X7pwAj:9fHE4mzD4AOrjLHj
TLSH
B70141D34A162904C04EC6BEB3E11A1757961EC44E4F09849848BA925CF91E4C9A823E
3 malicious · 3 files
ZIPd9408802f570baaa0db390e8e544c2efT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKDOC-UAFSQ3.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
arc:zip>lnk~T1059.003~T1202~T1204.002
Shape
arc:zip>lnk
malicious
2 nodes
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential3 malicious · 3 files
ZIPd9408802f570baaa0db390e8e544c2efT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKDOC-UAFSQ3.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
No malware configuration was found at this point.
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
d9408802f570baaa0db390e8e544c2ef › DOC-UAFSQ3.lnk
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with EssentialSign in or create a free account to view the matching YARA rules.
Create a free account