Malicious
48b8b18359c1e113f11eb0c70510a099
ZIP Archive
MD5: 48b8b18359c1e113f11eb0c70510a099
Size: 603 B
application/zip
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
ZIP archive
Size
603 B · 603 B
First seen
2026-08-03 12:35 · 2 months ago
Last seen
2026-08-03 12:35 · 2 months ago
Last analysis
2026-08-03 12:35 · 2 months ago
Hashes
MD5
48b8b18359c1e113f11eb0c70510a099
Sha1
7063961ea90774cbb217e1c22e3aab4eb4a4d5fc
Sha256
50213c0b418759e6cbc368cb41d6c819ecef509c2b438d02ff6be1d9717b6377
Sha384
c7ec526c13e6b20ab46dab0e161ac74271b18827a93737d3ab0a818ad7e44331ffe437fdc7132c017be70c7cb44e76fe
Sha512
7254497d3a71906ada459ca59c162269f62181c0771f04a95ae113251ae94f17da3fc258dfd28c5ce7e91842dcafc343e77873bd4ef4ea850353e3655c278b5d
SSDeep
12:5j08MWyk+HOeyxRlnScSUVdq2JqJnp6gK8Pjh95O0d+hJeQyJBG3dMWykYaR:908X1+HOxwzUDqnCSjE0UhJqJBGtX1d
TLSH
A3F0E13D8A2CA9D9C0E86976742A3F65D12250838193734297F8D6E08ABA7F02586C04
3 malicious · 3 files
ZIP48b8b18359c1e113f11eb0c70510a099T1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKNota_Fiscal--3CS96P.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
arc:zip>lnk~T1059.003~T1202~T1204.002
Shape
arc:zip>lnk
malicious
2 nodes
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential3 malicious · 3 files
ZIP48b8b18359c1e113f11eb0c70510a099T1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKNota_Fiscal--3CS96P.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
No malware configuration was found at this point.
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
48b8b18359c1e113f11eb0c70510a099 › Nota_Fiscal--3CS96P.lnk
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with EssentialSign in or create a free account to view the matching YARA rules.
Create a free account