Malicious
dc9b764aa28189bbeb5a6f5e2383ef2b
ZIP Archive
MD5: dc9b764aa28189bbeb5a6f5e2383ef2b
Size: 583 B
application/zip
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
ZIP archive
Size
583 B · 583 B
First seen
2026-08-03 13:08 · 2 months ago
Last seen
2026-08-03 13:08 · 2 months ago
Last analysis
2026-08-03 13:08 · 2 months ago
Hashes
MD5
dc9b764aa28189bbeb5a6f5e2383ef2b
Sha1
58c2d23fe5f11098ab33230ebee6015a6cc379da
Sha256
5da0254cb52567eb5e546a1b7b774e3ade46260b4e24d29af7e0976beb5cac19
Sha384
99d5b92d065ab46dbafd143f9cc5e9bf2c6c908458b4d5dd109a356ef50b807d4d5b1bf7704c8e68040f04264df506f2
Sha512
8e3da893f2c93a90e61961ffa4fb05a9f4a26be9cc35daf073b8e1abafe1919d27cf91004bbd0b6c1ac6408ebc2cbc501dbd78e1672779dccc2def0465d37165
SSDeep
12:5jcVHlYvncpRxPl9rtQ8+W5upFm6FL5eAPLdMjH4dDTWKTOszxWHGD7yV8aoBn:9+HlY0pzdvQ8Ujm+eqLdpYCvx1D78oB
TLSH
01F096E58140C2DADD21F877DF0629F864E90738083277089B7CF184B461275B70C98F
3 malicious · 3 files
ZIPdc9b764aa28189bbeb5a6f5e2383ef2bT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKDOC-QRPNI5.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
arc:zip>lnk~T1059.003~T1202~T1204.002
Shape
arc:zip>lnk
malicious
2 nodes
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential3 malicious · 3 files
ZIPdc9b764aa28189bbeb5a6f5e2383ef2bT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKDOC-QRPNI5.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
No malware configuration was found at this point.
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
dc9b764aa28189bbeb5a6f5e2383ef2b › DOC-QRPNI5.lnk
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with EssentialSign in or create a free account to view the matching YARA rules.
Create a free account