Malicious
1d47f7c9c6847159d07205b43cd3f413
ZIP Archive
MD5: 1d47f7c9c6847159d07205b43cd3f413
Size: 600 B
application/zip
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
ZIP archive
Size
600 B · 600 B
Hashes
MD5
1d47f7c9c6847159d07205b43cd3f413
Sha1
ac5135e2dc9cad0faad2b54356db3b0bfd9c7b9d
Sha256
5ed701ea6cbe40c4a85980f1904f4af3049b9f56365c7fb4f25af05d1844c538
Sha384
c30fb3df1bf7d58e08d11380c5deb811001cf28b30dec8d403712146f10fd2950178ed9538534666e1243ce045ecf5d5
Sha512
c00360dfdf80e923a6f306b0187a4e2cb03e6fd278bc91cd3b29102deb08760765ee47e2654ad81c88d07e744fd1d372fadeb5f33706fd450816feba5c2b904a
SSDeep
12:5jlDMWExTAfw44Tm+Cp+xnsxMaZ+M9lYi7QRnvkourhwpcZK5Pz8dMWExUafl/:9lDXExTA41mBxMaE8Yi7UJmhwpcZkzCK
TLSH
4EF0472DDD148400D5DA6BFB1C155645084CD8C3CD06B74C5A9DD5BA95728D21D16C58
3 malicious · 3 files
ZIP1d47f7c9c6847159d07205b43cd3f413T1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKNota_Fiscal_-SOLAD0.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
arc:zip>lnk~T1059.003~T1202~T1204.002
Shape
arc:zip>lnk
malicious
2 nodes
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential3 malicious · 3 files
ZIP1d47f7c9c6847159d07205b43cd3f413T1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKNota_Fiscal_-SOLAD0.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
No malware configuration was found at this point.
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
1d47f7c9c6847159d07205b43cd3f413 › Nota_Fiscal_-SOLAD0.lnk
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with EssentialSign in or create a free account to view the matching YARA rules.
Create a free account