Malicious
fde565a60909c6ae667ab6301c8893ff
ZIP Archive
MD5: fde565a60909c6ae667ab6301c8893ff
Size: 2.27 KB
application/zip
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
ZIP archive
Size
2.27 KB · 2,265 B
First seen
2026-06-20 20:01 · 4 months ago
Last seen
2026-06-20 20:01 · 4 months ago
Last analysis
2026-06-20 20:02 · 4 months ago
Hashes
MD5
fde565a60909c6ae667ab6301c8893ff
Sha1
fbcbcdecc8eb86ce4f9a0242e6deb52e8f252475
Sha256
2e1369bc8343db24f34e4a309ba1a0efbd181150f0e2d7ddb153e179e2659773
Sha384
f6a19af4cd3c528e52f2ea3ef340839e0d95dc4b861f8d3c8eff5aec68e5edf975f48b6628414b25545d316e189c1622
Sha512
4eff312f5a429d4fab75930d0abe6b0e91e85893f20f011a545466e9df0a9c8c6b3993a808db21ca159c78c0fa202c2408ad9aba34d496aa53044d0b808b7430
SSDeep
48:9EYfItwdYU+nwZ0rDbJqZN7bQMEAzcrnmNASmREV5cnk6:SOIRjw6z0XbQMEAIrmNAHEVenk6
TLSH
5F41D90054FB2B42C27FE237B90EA4CEF1464D41612B74927E18857E6ED84D16599F0E
5 malicious · 5 files
ZIPfde565a60909c6ae667ab6301c8893ffT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKProfitInvext_CRM_API_Credentials.pdf.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
LNKProfitInvext_CRM_API_Documentation.pdf.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
LNK: Command Execution
UNKNWOWNmalicious
conhoshuhuhuhuhuhuhuhuhuhuhu
LNK: Command Execution
UNKNWOWNmalicious
conhoshuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential5 malicious · 5 files
ZIPfde565a60909c6ae667ab6301c8893ffT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKProfitInvext_CRM_API_Credentials.pdf.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
LNKProfitInvext_CRM_API_Documentation.pdf.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
No malware configuration was found at this point.
LNK: Command Execution
UNKNWOWNmalicious
conhoshuhuhuhuhuhuhuhuhuhuhu
fde565a60909c6ae667ab6301c8893ff › ProfitInvext_CRM_API_Documentation.pdf.lnk
LNK: Command Execution
UNKNWOWNmalicious
conhoshuhuhuhuhuhuhuhuhuhuhu
fde565a60909c6ae667ab6301c8893ff › ProfitInvext_CRM_API_Credentials.pdf.lnk
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with EssentialSign in or create a free account to view the matching YARA rules.
Create a free account