Malicious
f6d3978d83a08d80d06e62fb691eeae3
ZIP Archive
MD5: f6d3978d83a08d80d06e62fb691eeae3
Size: 583 B
application/zip
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
ZIP archive
Size
583 B · 583 B
First seen
2026-08-03 13:03 · 2 months ago
Last seen
2026-08-03 13:03 · 2 months ago
Last analysis
2026-08-03 13:03 · 2 months ago
Hashes
MD5
f6d3978d83a08d80d06e62fb691eeae3
Sha1
7b12f254ce00a4058db9646a90ecc4adcb07e5eb
Sha256
70daa2520ddf061f4384bc20a3361a5d6092121ee483957d4dd3a4f51c0faaa6
Sha384
174441e745ab57ff46e0ee2114039ea0c7123515164e4cae159504275a1b870076ed7681e77621c219910dfab4a9dc52
Sha512
6a86f84f46d5c851b6fd37c6875d9220a61490c39d2acba4360970dad7cadd56c4919e6053d267ba98d37f80c9df0be082b248d6bf93486f711a30aa0a4464a0
SSDeep
12:5jVj6KjdENn1yWRURlgHNb3zCDna+d76Q31B2jAaoBn:9JFKMWRyg3Oba+d7L31BEcB
TLSH
08F026F30252D11FE800A8F734F4A13151CD90DA06093E25FFFCA58377651171A54CB1
3 malicious · 3 files
ZIPf6d3978d83a08d80d06e62fb691eeae3T1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKDOC-NWMUF4.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
arc:zip>lnk~T1059.003~T1202~T1204.002
Shape
arc:zip>lnk
malicious
2 nodes
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential3 malicious · 3 files
ZIPf6d3978d83a08d80d06e62fb691eeae3T1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKDOC-NWMUF4.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
No malware configuration was found at this point.
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
f6d3978d83a08d80d06e62fb691eeae3 › DOC-NWMUF4.lnk
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with EssentialSign in or create a free account to view the matching YARA rules.
Create a free account