Malicious
50d309687c0cff7d5e94cd5cfd2bad2e
ZIP Archive
MD5: 50d309687c0cff7d5e94cd5cfd2bad2e
Size: 739 B
application/zip
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
ZIP archive
Size
739 B · 739 B
First seen
2026-08-03 13:45 · 2 months ago
Last seen
2026-08-03 13:45 · 2 months ago
Last analysis
2026-08-03 13:45 · 2 months ago
Hashes
MD5
50d309687c0cff7d5e94cd5cfd2bad2e
Sha1
c9f7c33808c0ad0a770f6c0997413a885d2770f2
Sha256
490c9e571c45b9acdbebecd638188d2921d16cc23eca69978d6732214e83c8a0
Sha384
057170aa8b0f53b75591474a9da5cdafb9d104449a7386b244c2dff8aba76fe08ed2484d8f53ebeb38168fb2e76f6838
Sha512
f932ebe8d653b271cd72e73ec83aa08ad35895003aa1b96bd1994db6228207acf76a6f7ad34c52974514ab2bbf388316afbd4ede87768854db6562a3e5e65b50
SSDeep
12:5jVlkIxj6VoVoSXuQkZ32R35IsPnVtiEwJkqyOuS3LurbebaNhf87+t42+Ej2dvf:9VlzjyoV7eQkR2R3FVMEwJk4dyrCbWen
TLSH
E00115DF7D53E291F1DC4BB3CD1B1A8D16B95019B50FB151137EAC16C0905DB108996D
3 malicious · 3 files
ZIP50d309687c0cff7d5e94cd5cfd2bad2eT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKFirmaPeru-P71KBD.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
arc:zip>lnk~T1059.003~T1202~T1204.002
Shape
arc:zip>lnk
malicious
2 nodes
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential3 malicious · 3 files
ZIP50d309687c0cff7d5e94cd5cfd2bad2eT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKFirmaPeru-P71KBD.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
No malware configuration was found at this point.
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
50d309687c0cff7d5e94cd5cfd2bad2e › FirmaPeru-P71KBD.lnk
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with EssentialSign in or create a free account to view the matching YARA rules.
Create a free account