Malicious
fff1800bdc360b6c40ddc19c96e8baa2
ZIP Archive
MD5: fff1800bdc360b6c40ddc19c96e8baa2
Size: 968 B
application/zip
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
ZIP archive
Size
968 B · 968 B
First seen
2026-08-03 13:35 · 2 months ago
Last seen
2026-08-03 13:35 · 2 months ago
Last analysis
2026-08-03 13:35 · 2 months ago
Hashes
MD5
fff1800bdc360b6c40ddc19c96e8baa2
Sha1
f45009ec75a4acb7853d81fe2ffebc35b65b971c
Sha256
e62d9c6b34edbabe1ae1296f62827707015d917f09c8bab35a3279f02da2409d
Sha384
9628d5678912ddf8672f275c97b978dddce7c1d2ca919a4a83aae101680781597bef6c62634c59b244ae2f4ce988da0e
Sha512
59cc23a5d1eb7bce7f92d9aa76e83dae315aec3e2e68736f57199b6d07451e9c6b44df0c1db55cfbff48e6657443361554709c3216b4c27a3f59fcbc89420702
SSDeep
24:9FjmZZPx3o8Q8cPIrQF7tomMqd2M8s6AR9fKskug6BTSf2jjROl:9FjkPx3o8QRJ5omM+2M2AR9fYuTTe2jo
TLSH
43116133C5C9A749D78EA4303461970162E0E488400E6A3B29ACCB6C6A90185E0FD370
3 malicious · 3 files
ZIPfff1800bdc360b6c40ddc19c96e8baa2T1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKDOC-D0ZLHA.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
arc:zip>lnk~T1059.003~T1202~T1204.002
Shape
arc:zip>lnk
malicious
2 nodes
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential3 malicious · 3 files
ZIPfff1800bdc360b6c40ddc19c96e8baa2T1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKDOC-D0ZLHA.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
No malware configuration was found at this point.
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
fff1800bdc360b6c40ddc19c96e8baa2 › DOC-D0ZLHA.lnk
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with EssentialSign in or create a free account to view the matching YARA rules.
Create a free account