Malicious
6e5faff6e831c821879c192d01cbab4c
ZIP Archive
MD5: 6e5faff6e831c821879c192d01cbab4c
Size: 606 B
application/zip
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
ZIP archive
Size
606 B · 606 B
First seen
2026-08-03 13:21 · 2 months ago
Last seen
2026-08-03 13:21 · 2 months ago
Last analysis
2026-08-03 13:21 · 2 months ago
Hashes
MD5
6e5faff6e831c821879c192d01cbab4c
Sha1
cd5d03ea3c5b4100402d5aac8b490bedd8c3c557
Sha256
73e97da6e651f6631c61c7d2adb48e628db6c6b73a4a39625994b7170cbb525c
Sha384
21eb020de1a01fc97e2cb47bc6a6d8fa6eed265e094874002bebd56b122ef3fac67cde0ec8a5c0836bd69213d244751d
Sha512
fda7732f4ff5c41b3ff43a90a2c0e2de73f02a2859301459bbeff0bf6e05f7e5e6a0872a2fdefb8a259f8d9246f61ba85a8715d286e00a549870fa39381d4d6b
SSDeep
12:5jEK9w5Afg9aP5nUUTmW0a6twNPrsyHf237Uaj0LUsPlbGvT7flKPajt:9P9CAfgA5UUTytwNPgi2ApLUKAT7fwwt
TLSH
A3F041FEDB6C4E61C3A167B42B215327E79628538D0762DF7A7C060F98565A24B44323
3 malicious · 3 files
ZIP6e5faff6e831c821879c192d01cbab4cT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKFatura Eletronica-32VR08.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
arc:zip>lnk~T1059.003~T1202~T1204.002
Shape
arc:zip>lnk
malicious
2 nodes
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential3 malicious · 3 files
ZIP6e5faff6e831c821879c192d01cbab4cT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKFatura Eletronica-32VR08.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
No malware configuration was found at this point.
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
6e5faff6e831c821879c192d01cbab4c › Fatura Eletronica-32VR08.lnk
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with EssentialSign in or create a free account to view the matching YARA rules.
Create a free account