Malicious
dff9f9a85981265945e7bea37680d685
ZIP Archive
MD5: dff9f9a85981265945e7bea37680d685
Size: 938 B
application/zip
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
ZIP archive
Size
938 B · 938 B
First seen
2026-08-03 11:21 · 2 months ago
Last seen
2026-08-03 11:21 · 2 months ago
Last analysis
2026-08-03 11:21 · 2 months ago
Hashes
MD5
dff9f9a85981265945e7bea37680d685
Sha1
245282d19ad744b671aab2c25511aa2b46b4dd61
Sha256
36a0507103a2667ff1eae230fd1307e7721309eaf06202c9ba1a461473d12b60
Sha384
5dd10c801d2cc7097b14c4515b7aaa2bb24abc15e109d042a46b8f006d95887745f952b04ae7eaab20382c15cf308a65
Sha512
0a607ae533dff17e332c863b81d4ba44aec5560c325acff9add9c304baf1ce9cbe448bb33c0a04458fb11b6dfdbe4e0b2c25c13ca67580f093bff834e09e8709
SSDeep
24:93XvdAlyUs0tTa7i/lUrtUuFgfe4RQRW/lIulmsl:93XvmlyUvha7i9UrtId//Sulmsl
TLSH
BF11BB2CD5144C8CCE9C60B9DD7F041BE11D2EFC1528BADB245AF6344055535ED60173
3 malicious · 3 files
ZIPdff9f9a85981265945e7bea37680d685T1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKDOC-6LLD60.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
arc:zip>lnk~T1059.003~T1202~T1204.002
Shape
arc:zip>lnk
malicious
2 nodes
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential3 malicious · 3 files
ZIPdff9f9a85981265945e7bea37680d685T1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKDOC-6LLD60.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
No malware configuration was found at this point.
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
dff9f9a85981265945e7bea37680d685 › DOC-6LLD60.lnk
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with EssentialSign in or create a free account to view the matching YARA rules.
Create a free account