Malicious
1891aa50ea65854ee9b5739042e033cf
ZIP Archive
MD5: 1891aa50ea65854ee9b5739042e033cf
Size: 598 B
application/zip
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
ZIP archive
Size
598 B · 598 B
First seen
2026-08-03 12:35 · 2 months ago
Last seen
2026-08-03 12:35 · 2 months ago
Last analysis
2026-08-03 12:35 · 2 months ago
Hashes
MD5
1891aa50ea65854ee9b5739042e033cf
Sha1
37e576cd932825cefb2d5974ea65c28275b7c427
Sha256
c16cf54e08d07f1d768bf600e84589adeef3d18589540916606eff994e77fad2
Sha384
63d7526aaf7e25f135b7000e1a9c1fd6af04eee524a649b04b125f06eea3ba59a157a819f8b796ca54aee406889942d7
Sha512
8884f69bb50303be53c604a7f7b571ef89b042af53fb39384a1dc3f618aa93e58eef17b904992079195df6d808719cb98ff8edc7bc737b94eec9a96cd6da36ce
SSDeep
12:5jvtMWI9AGPiyVL/x7kPp9dhKJEIHWU23tm9471RWGig9YcVG/BNZeBFudMWIPaP:9lXI9Xb/BkPDaJfHJQkoRWXg9nQ4B6XR
TLSH
3DF0470BDF045081F02404F4940D27954328F460401705773E989EED79370F94CE8AF4
3 malicious · 3 files
ZIP1891aa50ea65854ee9b5739042e033cfT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKNota_Fiscal--OJ1WVQ.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
arc:zip>lnk~T1059.003~T1202~T1204.002
Shape
arc:zip>lnk
malicious
2 nodes
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential3 malicious · 3 files
ZIP1891aa50ea65854ee9b5739042e033cfT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKNota_Fiscal--OJ1WVQ.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
No malware configuration was found at this point.
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
1891aa50ea65854ee9b5739042e033cf › Nota_Fiscal--OJ1WVQ.lnk
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with EssentialSign in or create a free account to view the matching YARA rules.
Create a free account