Malicious
df115b5bfe6d89169764d9fd5582c0a7
ZIP Archive
MD5: df115b5bfe6d89169764d9fd5582c0a7
Size: 585 B
application/zip
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
ZIP archive
Size
585 B · 585 B
First seen
2026-08-03 13:03 · 2 months ago
Last seen
2026-08-03 13:03 · 2 months ago
Last analysis
2026-08-03 13:03 · 2 months ago
Hashes
MD5
df115b5bfe6d89169764d9fd5582c0a7
Sha1
cbdc7d96ab019a659f16ac6ef4c6709fa2971542
Sha256
f1a7ba480a31438b0cd0bfbdb507cb5bee58e50ea7f917cedd6a6cdcaba36a39
Sha384
b1fe11c459440cf32c08af29f858ffb05b03d283298fc0dc228543a507160815324b1f079453c1a6b597c5d0eaf531e3
Sha512
9e08e7558f309dff60a1b817e34fb557ff5e41c7264392a99a528205a0318ac591b58efd2605172afac078a536e3eaf0db967c3ea449520849f00eab6cbc97b3
SSDeep
12:5jpXE+XLAIRY35dpgUEr1TSNOsKE1wPwOQP2484uq1f05sInFPXERXcaoH:9ucAIKpdCUcMf1oFE2tjqSsIFcyH
TLSH
51F0267117615A62F26F8AB551B1B6C1C2A484F74493CDC6139DF4480D60394C5DDB00
3 malicious · 3 files
ZIPdf115b5bfe6d89169764d9fd5582c0a7T1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKDOC-XW57DH.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
arc:zip>lnk~T1059.003~T1202~T1204.002
Shape
arc:zip>lnk
malicious
2 nodes
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential3 malicious · 3 files
ZIPdf115b5bfe6d89169764d9fd5582c0a7T1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKDOC-XW57DH.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
No malware configuration was found at this point.
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
df115b5bfe6d89169764d9fd5582c0a7 › DOC-XW57DH.lnk
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with EssentialSign in or create a free account to view the matching YARA rules.
Create a free account