Malicious
dad27585bb8c928ffc1f6c6606d5c3a0
ZIP Archive
MD5: dad27585bb8c928ffc1f6c6606d5c3a0
Size: 583 B
application/zip
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
ZIP archive
Size
583 B · 583 B
First seen
2026-08-03 12:41 · 2 months ago
Last seen
2026-08-03 12:41 · 2 months ago
Last analysis
2026-08-03 12:42 · 2 months ago
Hashes
MD5
dad27585bb8c928ffc1f6c6606d5c3a0
Sha1
14073ec9a33f24e8dbdc3a0a5c1037c096dfdecd
Sha256
172012d0ebabaf68913a3a8b7d426ac3ab49983b7fdfbd1dd358c599d497196d
Sha384
32582b4904f9a99a0a9849d9f3c3f1d520d2d84dd2d1141e652788d82b9366cca292eaa53d753cac53df683d37b23dc5
Sha512
6ba830f2f5a5c5c7250c96a2264aae8286e5a9f26a1bb0fdc643533ffee474b785f84c918c11d586d84dc0c017f0db0c2570e1cc176aeb9f349ffbfbe4c810b3
SSDeep
12:5jjw0zQ1J2FMgB9kh66fP1URomJ5cxSH23COPrITRGqc7JiaoBn:9jC1JFvrP1UemJQSWSgEUl7JCB
TLSH
98F041BF621A92D8E50ECEF2B62E33EF02200409000B88590DB8FE8D53654C72E1C204
3 malicious · 3 files
ZIPdad27585bb8c928ffc1f6c6606d5c3a0T1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKDOC-U2ZVRI.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
arc:zip>lnk~T1059.003~T1202~T1204.002
Shape
arc:zip>lnk
malicious
2 nodes
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential3 malicious · 3 files
ZIPdad27585bb8c928ffc1f6c6606d5c3a0T1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKDOC-U2ZVRI.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
No malware configuration was found at this point.
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
dad27585bb8c928ffc1f6c6606d5c3a0 › DOC-U2ZVRI.lnk
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with EssentialSign in or create a free account to view the matching YARA rules.
Create a free account