Malicious
ddb2eb58ae8e74ee578fb9e1f07c3f29
ZIP Archive
MD5: ddb2eb58ae8e74ee578fb9e1f07c3f29
Size: 606 B
application/zip
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
ZIP archive
Size
606 B · 606 B
First seen
2026-08-03 08:53 · 2 months ago
Last seen
2026-08-03 08:53 · 2 months ago
Last analysis
2026-08-03 08:53 · 2 months ago
Hashes
MD5
ddb2eb58ae8e74ee578fb9e1f07c3f29
Sha1
3d36d34932d98d4d4a60608a937f02565cc5a62b
Sha256
77380d517ea14f84afda318da052c1996d5e474188e940e17dd0ae9fef1498e9
Sha384
574ce87060a9809e21227cb36ebe8d3fd36a9ca1445c23eea2e644bef59ead127151c7d430bf499be94a138563967fe9
Sha512
3f377fa96da86dd435d9e2bdd0b2cbf2d214fd242a421f6f6aa149645b5f70f9c5e4b8a392722a9fe329d08d64f49d7c9b3a4802e45a35dba248b7f0001056fd
SSDeep
12:5j4jO36MVSKPCb3wmurQDIfRT9Zd3BciQefVhxHijWP247OHnuUAujOCrSiaU:94jMU8murQkfNNyjYSHnYu8m
TLSH
9FF047038A450088C53F983DFED1377D424D97DCA2CB9F0D54F94879089C252CF23424
3 malicious · 3 files
ZIPddb2eb58ae8e74ee578fb9e1f07c3f29T1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKVoucher_-FIXLLI.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
arc:zip>lnk~T1059.003~T1202~T1204.002
Shape
arc:zip>lnk
malicious
2 nodes
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential3 malicious · 3 files
ZIPddb2eb58ae8e74ee578fb9e1f07c3f29T1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKVoucher_-FIXLLI.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
No malware configuration was found at this point.
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
ddb2eb58ae8e74ee578fb9e1f07c3f29 › Voucher_-FIXLLI.lnk
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with EssentialSign in or create a free account to view the matching YARA rules.
Create a free account