Malicious
dfed9849cc1f87853f3f6eb540156744
ZIP Archive
MD5: dfed9849cc1f87853f3f6eb540156744
Size: 608 B
application/zip
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
ZIP archive
Size
608 B · 608 B
First seen
2026-08-03 08:51 · 2 months ago
Last seen
2026-08-03 08:51 · 2 months ago
Last analysis
2026-08-03 08:51 · 2 months ago
Hashes
MD5
dfed9849cc1f87853f3f6eb540156744
Sha1
85dd3957d8bcb6d0d3ca41b59fe2f0fa89a61537
Sha256
75a0335415396fc5211063d9e663b0c79ca19ba701e174ffc93775c77db0f980
Sha384
db8ebfdccb356c2bc2ddfbeac635aa6d6a24c3d6930b8b8cc220c5e41d4aff3486cbdb1d742c39977b44309d24d06949
Sha512
d05c05783cc7dca23a025769f58bda49665e486706624b4b2a7862292a8be7e6f2a6407879d56f5517eadea301ff09a6e776e78b2c0762deb38dbb670bfe2800
SSDeep
12:5j1v08AMADUOf93WpQAI/G04hDNXlHW3U2xmnWwmKuZ+LGoMmBPv012MADUO6ai/:95PAMBOf9yx08XlHIuWwmKufoMc3VMBr
TLSH
88F041B2A92EE492D1CE65FE3194392D08BE80D2B6830C2BA976645845B852199F1FD8
3 malicious · 3 files
ZIPdfed9849cc1f87853f3f6eb540156744T1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKFazer_Reserva--5XVW76.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
arc:zip>lnk~T1059.003~T1202~T1204.002
Shape
arc:zip>lnk
malicious
2 nodes
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential3 malicious · 3 files
ZIPdfed9849cc1f87853f3f6eb540156744T1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKFazer_Reserva--5XVW76.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
No malware configuration was found at this point.
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
dfed9849cc1f87853f3f6eb540156744 › Fazer_Reserva--5XVW76.lnk
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with EssentialSign in or create a free account to view the matching YARA rules.
Create a free account