Malicious
36b21a1320dc3fc8ec21f9dba3ef5d38
ZIP Archive
MD5: 36b21a1320dc3fc8ec21f9dba3ef5d38
Size: 891 B
application/zip
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
ZIP archive
Size
891 B · 891 B
First seen
2026-08-03 13:44 · 2 months ago
Last seen
2026-08-03 13:44 · 2 months ago
Last analysis
2026-08-03 13:44 · 2 months ago
Hashes
MD5
36b21a1320dc3fc8ec21f9dba3ef5d38
Sha1
90adc891445b1531b3ed012e9897f0f096def803
Sha256
6a5d2e329b3ab528ea229e5a73e991a94a050393e284f11754d64216af4890fd
Sha384
24173745f9b0442b14ddbf1be49f13b001ec68d78df4f5ced3c3b4f1184e0dcc5b73076e22581351f7fb802f302ea5c4
Sha512
deefa627adde8593e619e5cdf19a80503e3ca7e8b00286c4df516d64b7b065ce346aec9d3fcb615eb7a2a32cb2ae31e3e40adeb75aa7f4be719e688e7a674bb9
SSDeep
24:95ufyaSpZ1bWunzTDBWjTvQn4Urar9tc/5i7pBI:906Z5DzT9+vQPCtc/wpBI
TLSH
AD1167C63C9B9540DB528AF916083F454A3690E718C57D11347689157204C656DC3DC6
3 malicious · 3 files
ZIP36b21a1320dc3fc8ec21f9dba3ef5d38T1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKFirmaPeru-SO8907.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
arc:zip>lnk~T1059.003~T1202~T1204.002
Shape
arc:zip>lnk
malicious
2 nodes
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential3 malicious · 3 files
ZIP36b21a1320dc3fc8ec21f9dba3ef5d38T1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKFirmaPeru-SO8907.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
No malware configuration was found at this point.
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
36b21a1320dc3fc8ec21f9dba3ef5d38 › FirmaPeru-SO8907.lnk
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with EssentialSign in or create a free account to view the matching YARA rules.
Create a free account