Malicious
ZIP Archive
MD5: df562c3cf34b923430ad9901b417ea35
Size: 581 B
application/zip
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
ZIP archive
Size
581 B · 581 B
First seen
2026-08-03 13:01 · 2 months ago
Last seen
2026-08-03 13:01 · 2 months ago
Last analysis
2026-08-03 13:01 · 2 months ago
Hashes
MD5
df562c3cf34b923430ad9901b417ea35
Sha1
cd5a54a6fedf0b01404f71c5b7b4e85c1242b2c7
Sha256
8744d74f727cd56310fd02a0a1b53a463bf728588016b574ea1d8c632c2ea673
Sha384
8e6559d2efb8a6c45243f2f17d7e1650f02fa4f70547016c2260d8c52734ac74f8a23766e86a2aefe73e576e786ea992
Sha512
d0969c8ebbbff2565e0a4a020e9556fd9e258d80a8a527c837c2c97855059b59e47462276bd0c354bb9d688d55d3204c110e0abe9ee6135b0d604a6a0c55666c
SSDeep
12:5jCKlWwqnGq4kE69aT/e+BEOBMAVsnTTAM1VW4EaoT:9C7Gq5Fay+yhAVsnTTAM1VW4QT
TLSH
01F02603C9E858C4C4219C76F570A05151638C91E88AE7AD331DD7DA07F849BBB037A5
3 malicious · 3 files
ZIPdf562c3cf34b923430ad9901b417ea35T1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKDOC-QDXVRV.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
arc:zip>lnk~T1059.003~T1202~T1204.002
Shape
arc:zip>lnk
malicious
2 nodes
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential