Malicious
4b1c1df2bd197b19217ff592df9050dd
ZIP Archive
MD5: 4b1c1df2bd197b19217ff592df9050dd
Size: 605 B
application/zip
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
ZIP archive
Size
605 B · 605 B
First seen
2026-08-03 08:49 · 2 months ago
Last seen
2026-08-03 08:49 · 2 months ago
Last analysis
2026-08-03 08:49 · 2 months ago
Hashes
MD5
4b1c1df2bd197b19217ff592df9050dd
Sha1
db4dde6b8b2c1eb8269808d0a9221e585700a08f
Sha256
3f38150ccb74c8fa55e4816afa3151abe3f2723bb07b76f8994f941bc9973ee6
Sha384
8507c2da95ee303dca48b9d2ab954665ad274d89995f443b30223da8ffad8c895e83037d9d298540fd461e374e3cc1a5
Sha512
f0a81553c0576a6460b70bdc43d855ced61e5f03d938c40de5b8608c31bd869680c514c47a3a3cda41e51a99717c772dc48ab5f3943d79e1f70f77c629357b5c
SSDeep
12:5jsY8AMAR6KevN1ahaMyOMFgVjdFHB/oY0ckfimUKRMwzumBCY12MAR6Pa7:9s7AMpKUNQhaMXVjLHdoY2iLKRhzumB4
TLSH
4AF0AC209368FAD2C11206FA79D224BDE8A857403336A9C70B60AD250476B794A710B1
3 malicious · 3 files
ZIP4b1c1df2bd197b19217ff592df9050ddT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKFazer_Reserva--BNGT4H.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
arc:zip>lnk~T1059.003~T1202~T1204.002
Shape
arc:zip>lnk
malicious
2 nodes
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential3 malicious · 3 files
ZIP4b1c1df2bd197b19217ff592df9050ddT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKFazer_Reserva--BNGT4H.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
No malware configuration was found at this point.
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
4b1c1df2bd197b19217ff592df9050dd › Fazer_Reserva--BNGT4H.lnk
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with EssentialSign in or create a free account to view the matching YARA rules.
Create a free account