Malicious
ZIP Archive
MD5: 4f5f5b4a9d152820e5a4498921b6d617
Size: 908 B
application/zip
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
ZIP archive
Size
908 B · 908 B
First seen
2026-08-03 13:45 · 2 months ago
Last seen
2026-08-03 13:45 · 2 months ago
Last analysis
2026-08-03 13:45 · 2 months ago
Hashes
MD5
4f5f5b4a9d152820e5a4498921b6d617
Sha1
464c26a5a15e7d983700f00a913cf90402c44539
Sha256
0fed359c75003819eb43a25ada3368e63048830b466c2f6c4c2bf668ce0a1dae
Sha384
aaa47266980bfc0c951f64542f7b065427aeff2e4fc075bbe04014b7452e8b4bc8e62ae45ba57721230ce9ce30646423
Sha512
6a52cd3cb83a5802013de2ee34eabfd4bb283cb0ecce13db0cfb4f612bdbea905d3d5a31877d1c7f282193c98ae2d6e0fffea61580fe755cdfef122c2528e0d4
SSDeep
24:9+seLEwYiPxAWyz8nq1L2xouLcbweGq4Op4jEZ3IXGipoEtl:9XniyaY6Awy4O0EZ3Ze3l
TLSH
6911B329D25F0282EC8204700C917B99B3FAC40C25A864330B3E58200D293BAA017F84
3 malicious · 3 files
ZIP4f5f5b4a9d152820e5a4498921b6d617T1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKFirmaPeru-NL1AHT.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
arc:zip>lnk~T1059.003~T1202~T1204.002
Shape
arc:zip>lnk
malicious
2 nodes
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential