Malicious
df3978b6887be8e4df0579d5d34c27eb
ZIP Archive
MD5: df3978b6887be8e4df0579d5d34c27eb
Size: 937 B
application/zip
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
ZIP archive
Size
937 B · 937 B
First seen
2026-08-03 11:26 · 2 months ago
Last seen
2026-08-03 11:26 · 2 months ago
Last analysis
2026-08-03 11:26 · 2 months ago
Hashes
MD5
df3978b6887be8e4df0579d5d34c27eb
Sha1
0947c7b20033bd7c0743a54239f7453892419a2b
Sha256
7825d95b776fd4f4f0cb30b39edadacc6de86a1867a06bf89899476d2c9aaccd
Sha384
2796602fbb343929efb58f9e5de5bceb204682f0fd3da8004b0a44471c024fec846108dd7a59d2b62b67806d97492682
Sha512
aacae9f03ac85534c84ff8f2ed9a7adc344c64b14aa34eb9ae5c582059df6e86cbdff52eb7aa5afb639fbcfea8ed3b5ce423306570850f5f1767de8abdbc4083
SSDeep
24:9Gfl9oeY9ugG7wc3HzScwg5vBHZOQJ1GfTNJtj42AkGlkPSJwBZUZjEflgRF:9GvYur3zScrNB1J0pJtj4VfkPNUZjE0F
TLSH
3F1184B21006739ADA0252FA806D66EE0E36199858A95EEF349CAB5015851AC82C580A
3 malicious · 3 files
ZIPdf3978b6887be8e4df0579d5d34c27ebT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKDOC-NBDIZ5.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
arc:zip>lnk~T1059.003~T1202~T1204.002
Shape
arc:zip>lnk
malicious
2 nodes
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential3 malicious · 3 files
ZIPdf3978b6887be8e4df0579d5d34c27ebT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKDOC-NBDIZ5.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
No malware configuration was found at this point.
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
df3978b6887be8e4df0579d5d34c27eb › DOC-NBDIZ5.lnk
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with EssentialSign in or create a free account to view the matching YARA rules.
Create a free account