Malicious
da3657a987dfbc02a8e271a4a0e223c7
ZIP Archive
MD5: da3657a987dfbc02a8e271a4a0e223c7
Size: 578 B
application/zip
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
ZIP archive
Size
578 B · 578 B
First seen
2026-08-03 11:29 · 2 months ago
Last seen
2026-08-03 11:29 · 2 months ago
Last analysis
2026-08-03 11:29 · 2 months ago
Hashes
MD5
da3657a987dfbc02a8e271a4a0e223c7
Sha1
c5a1ccf8b02e377e2d2cd80c6c4fcb27e699d9b8
Sha256
7ed176a478a2544feaa383de1414d28507b9cb82b5163d70a263ff9ee9bae54d
Sha384
771599680b461a97f298aead7da421a0d04a12fdb914fdadd9f965cd9d49ebb1802b8ef33df55a04bf438858e0818323
Sha512
b66576e3540adc77bd33d3d1b880c21f657ac01b9d12ce5edee424024723be4715c3246b89aaf73f422f8d451802ba4c332ecbe884c1baff21f84cc8cb705817
SSDeep
12:5jjFdRXF3idljSGW9pa1rXvDRx4J0ScKbhY/sTFF8aou:9jBF3pPpatfbScKbosTFau
TLSH
4AF02653475342F0E512E27BA02F7139727105A417AFEB69A516F01D29CBBE1574C610
3 malicious · 3 files
ZIPda3657a987dfbc02a8e271a4a0e223c7T1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKDOC-72HFMR.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
arc:zip>lnk~T1059.003~T1202~T1204.002
Shape
arc:zip>lnk
malicious
2 nodes
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential3 malicious · 3 files
ZIPda3657a987dfbc02a8e271a4a0e223c7T1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKDOC-72HFMR.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
No malware configuration was found at this point.
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
da3657a987dfbc02a8e271a4a0e223c7 › DOC-72HFMR.lnk
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with EssentialSign in or create a free account to view the matching YARA rules.
Create a free account