Malicious
df432d2dfa6e26103ab4be551ab5d0a5
ZIP Archive
MD5: df432d2dfa6e26103ab4be551ab5d0a5
Size: 586 B
application/zip
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
ZIP archive
Size
586 B · 586 B
First seen
2026-08-04 08:17 · 2 months ago
Last seen
2026-08-04 08:17 · 2 months ago
Last analysis
2026-08-04 08:17 · 2 months ago
Hashes
MD5
df432d2dfa6e26103ab4be551ab5d0a5
Sha1
57f90827c5dfc2cc8f8d7cd13a6675ced506c79a
Sha256
3332afd44d6e8860e6aaf449aec7ecd167390bb5778713bea7daa39ced83e78c
Sha384
8a57058ef959b4539a15b031de07abf80b90841e6f0139428fb994aee63b10ac593521eeb949d2ca501bc7b1e8e1cedf
Sha512
f015d582cc9ddbb013b3a874af964071896aab13984d8e9de4c6db5759b341054a60ff8de9bc0857d43e1559332c957915aecc298f234abd7079278b76d210c0
SSDeep
12:5jMhmVmebardDEIzmMR6WD/HQOA6R+CuLt43PPvyvFi2hmJaoSt:9MglOr1ESmA6Wbv+CuL4PXyvw2gXSt
TLSH
CCF096E03BA2C0C0F8C20EF5C0D12C0A4900C81F43CB2BA53569388482111D1897B3BC
3 malicious · 3 files
ZIPdf432d2dfa6e26103ab4be551ab5d0a5T1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKDOC-D428D5.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
arc:zip>lnk~T1059.003~T1202~T1204.002
Shape
arc:zip>lnk
malicious
2 nodes
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential3 malicious · 3 files
ZIPdf432d2dfa6e26103ab4be551ab5d0a5T1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKDOC-D428D5.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
No malware configuration was found at this point.
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
df432d2dfa6e26103ab4be551ab5d0a5 › DOC-D428D5.lnk
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with EssentialSign in or create a free account to view the matching YARA rules.
Create a free account