Malicious
dd3b7a46d02a8c542445f4b06a4ed34c
ZIP Archive
MD5: dd3b7a46d02a8c542445f4b06a4ed34c
Size: 590 B
application/zip
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
ZIP archive
Size
590 B · 590 B
First seen
2026-08-03 10:47 · 2 months ago
Last seen
2026-08-03 10:47 · 2 months ago
Last analysis
2026-08-03 10:47 · 2 months ago
Hashes
MD5
dd3b7a46d02a8c542445f4b06a4ed34c
Sha1
829166e5f7eea515e7d0b94e320ac91c101e05b1
Sha256
d4e3873b8c72a2f88d0d35d84fe1ff8d68c0794ae11d5ef50f2bd79e5866ac1b
Sha384
30b2ba33a8332bd642821bfc9f3fe17bc167857c0f9194a2dfab2d54ea13ee86f71a12a72d10ea52cab3f6367d245ca7
Sha512
96dc7a101aab8187a5c8e304c4eea37dac73e7946f7bc62684eaa6dd45771d1c470092418007e4e9b956f0912e54875491eade942018670405e4277e6500b59a
SSDeep
12:5jqtbUItP/r6WFz7aoevwVhosrOkbPi7IG/f6teNlxcpG/a48cwsVMgu6BAtgiad:9zCP/GFvwzoUK7IXsNwcL8Su6BTC6
TLSH
73F041E6C08D4340F286B3FC1824AABE27324D07411E6B1BC9D8C98818104396C05240
3 malicious · 3 files
ZIPdd3b7a46d02a8c542445f4b06a4ed34cT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKDOC-D8R3KI.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
arc:zip>lnk~T1059.003~T1202~T1204.002
Shape
arc:zip>lnk
malicious
2 nodes
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential3 malicious · 3 files
ZIPdd3b7a46d02a8c542445f4b06a4ed34cT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKDOC-D8R3KI.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
No malware configuration was found at this point.
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
dd3b7a46d02a8c542445f4b06a4ed34c › DOC-D8R3KI.lnk
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with EssentialSign in or create a free account to view the matching YARA rules.
Create a free account