Malicious
dd543142955d6c68e6af2acaa0f92b51
ZIP Archive
MD5: dd543142955d6c68e6af2acaa0f92b51
Size: 2.23 KB
application/zip
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
ZIP archive
Size
2.23 KB · 2,231 B
First seen
2026-07-06 20:01 · 3 months ago
Last seen
2026-07-06 20:01 · 3 months ago
Last analysis
2026-07-07 09:23 · 3 months ago
Hashes
MD5
dd543142955d6c68e6af2acaa0f92b51
Sha1
300f6d824ac368cbd0db059ea048820989dc9715
Sha256
0f9e9e3f242dce4f85b98819a8b9db4d28634e5147a832e3f4c24218eb1c8489
Sha384
f2ba04c8385decd73cceca0f8941c5b4af039df4b85bc3fda3f6f0757424505604fad8cd45f5f2c9cd9561958179d4b8
Sha512
3058c989c7eae476cada8cf3e60b4815840a39dd45475cee6280623dfaff85e859c722592aa88ea9a851ee3d241fb745128d451eb08656d831274d848e49df91
SSDeep
48:9N7vq8gkkUlBii59TDPgb1POwu/UPVlhziVJR+5aFP7Tr05alXxFt:LbNgkXBB/POLUZrAab3
TLSH
98410B8043A18992E18F8E79F518D8D9E32CAF113D5EF57A3C1664C1A4C2CFB650156F
5 malicious · 5 files
ZIPdd543142955d6c68e6af2acaa0f92b51T1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKPivlex_CRM_API_Documentation.pdf.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
LNKPivlex_CRM_API_Credentials.pdf.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
LNK: Command Execution
UNKNWOWNmalicious
conhoshuhuhuhuhuhuhuhuhuhuhu
LNK: Command Execution
UNKNWOWNmalicious
conhoshuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential5 malicious · 5 files
ZIPdd543142955d6c68e6af2acaa0f92b51T1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKPivlex_CRM_API_Documentation.pdf.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
LNKPivlex_CRM_API_Credentials.pdf.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
No malware configuration was found at this point.
LNK: Command Execution
UNKNWOWNmalicious
conhoshuhuhuhuhuhuhuhuhuhuhu
dd543142955d6c68e6af2acaa0f92b51 › Pivlex_CRM_API_Credentials.pdf.lnk
LNK: Command Execution
UNKNWOWNmalicious
conhoshuhuhuhuhuhuhuhuhuhuhu
dd543142955d6c68e6af2acaa0f92b51 › Pivlex_CRM_API_Documentation.pdf.lnk
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with EssentialSign in or create a free account to view the matching YARA rules.
Create a free account