Malicious
ZIP Archive
MD5: 6675cc1cdde42972ad379da16b46cbaa
Size: 897 B
application/zip
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
ZIP archive
Size
897 B · 897 B
First seen
2026-08-03 13:45 · 2 months ago
Last seen
2026-08-03 13:45 · 2 months ago
Last analysis
2026-08-03 13:45 · 2 months ago
Hashes
MD5
6675cc1cdde42972ad379da16b46cbaa
Sha1
7fa0e0d4e05690a3c4ae1bdfdf8646279dd2f1ff
Sha256
1daa4889901567e0727d52d01ebe7218ecc1ed28fab3e748a66cb36b41bba42e
Sha384
701c26ac95d41b3f68d2f7166b1fca1283cdd10a00a67445cc0885d2c13cdd3b2cdf008301677ac6e19119a9cd8402af
Sha512
2fc23cfdbdb43269905714efceeff624e66d5459a8d28c3c62ced29faa745671fcd688e3417504c2abde8aac9232d21683d9f608123282c120504b58aa039e30
SSDeep
24:9F6D130iq3cva48fR1+VYe17MNyNgsCoTKcwbjqEN/:98picvV8f2VNdNgsBZwvqEN/
TLSH
9611630495FA4E74DA880CF0983037DE9946C877F91A2892B1DD0DB10D6546B8DA3702
3 malicious · 3 files
ZIP6675cc1cdde42972ad379da16b46cbaaT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKFirmaPeru-Y800SL.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
arc:zip>lnk~T1059.003~T1202~T1204.002
Shape
arc:zip>lnk
malicious
2 nodes
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential