Malicious
d9b3d1df47a4544ecc605f60b30d6060
ZIP Archive
MD5: d9b3d1df47a4544ecc605f60b30d6060
Size: 2.25 KB
application/zip
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
ZIP archive
Size
2.25 KB · 2,253 B
First seen
2026-07-03 20:01 · 3 months ago
Last seen
2026-07-03 20:01 · 3 months ago
Last analysis
2026-07-04 01:02 · 3 months ago
Hashes
MD5
d9b3d1df47a4544ecc605f60b30d6060
Sha1
b78861c648a71e4639071d70397ee9365414435e
Sha256
b570834a38ff9d5e085dc48700332e536635d23e7cfb9b93fe65be1ffb85e0f7
Sha384
cea6375abd9ecb361a5c2508ae1d370e001ed6f3ae13d9d43e139f35faffe841d873479addb23203a5998165da4e1af0
Sha512
50889f2d38771c4d18b1f8bd3617949f75db2259793cc9a5a1d7e94daea8dd04297dbc6d20659ab21c57ed2cd4be0e3bc459021bb476518fc1c3507963cb6661
SSDeep
48:9oxKCip9v8QkeovLchXTWARl7p5NUZv63QXHHjLuGmA3N:6xKCKZ8NXqWE/tcHH13N
TLSH
3A41298996D42068EAEB9370B93A4E81CA7332F4F636F00432482CC16AAE14D065FA5D
5 malicious · 5 files
ZIPd9b3d1df47a4544ecc605f60b30d6060T1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKWealthGAF_CRM_API_Documentation.pdf.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
LNKWealthGAF_CRM_API_Credentials.pdf.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
LNK: Command Execution
UNKNWOWNmalicious
conhoshuhuhuhuhuhuhuhuhuhuhu
LNK: Command Execution
UNKNWOWNmalicious
conhoshuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential5 malicious · 5 files
ZIPd9b3d1df47a4544ecc605f60b30d6060T1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKWealthGAF_CRM_API_Documentation.pdf.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
LNKWealthGAF_CRM_API_Credentials.pdf.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
No malware configuration was found at this point.
LNK: Command Execution
UNKNWOWNmalicious
conhoshuhuhuhuhuhuhuhuhuhuhu
d9b3d1df47a4544ecc605f60b30d6060 › WealthGAF_CRM_API_Credentials.pdf.lnk
LNK: Command Execution
UNKNWOWNmalicious
conhoshuhuhuhuhuhuhuhuhuhuhu
d9b3d1df47a4544ecc605f60b30d6060 › WealthGAF_CRM_API_Documentation.pdf.lnk
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with EssentialSign in or create a free account to view the matching YARA rules.
Create a free account