Malicious
7b918c8f9abfd1c3fdad3099ebec56a8
ZIP Archive
MD5: 7b918c8f9abfd1c3fdad3099ebec56a8
Size: 612 B
application/zip
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
ZIP archive
Size
612 B · 612 B
First seen
2026-08-03 12:04 · 2 months ago
Last seen
2026-08-03 12:04 · 2 months ago
Last analysis
2026-08-03 12:04 · 2 months ago
Hashes
MD5
7b918c8f9abfd1c3fdad3099ebec56a8
Sha1
97c1ef4aee4412dccb6b46eabd09484c7350ef82
Sha256
0c5001fc5680e731d39adfea5d933840e7175c0682da7c9edcf9be909765b67b
Sha384
899179700db1f74a6302211d9623d2b768e54444af15e63a21524948963142d4de2380e020bcd76a538862327abc1328
Sha512
b9acd0a86ccbf8155e54c27eb3f775c0e6a75503963972369575240e60ebbac67b00b933777d4bf15bceed74f6e7def76b96ee7d0df122e5dabac3762c1febb0
SSDeep
12:5j0KjDcgcDyvb9PGEI6hWSk8Vgqzj3DPW/G/eiOftYDKUzd7OnjD4ia8:90KjogyyxGEIm1VgwfPW/+OftGLdOnjx
TLSH
D0F0470F586D0F72C102F4F505AB62D161B5F476C60EA3D22870719440357F1C256698
3 malicious · 3 files
ZIP7b918c8f9abfd1c3fdad3099ebec56a8T1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKJustificantePDF2107-ZWU18W.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
arc:zip>lnk~T1059.003~T1202~T1204.002
Shape
arc:zip>lnk
malicious
2 nodes
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential3 malicious · 3 files
ZIP7b918c8f9abfd1c3fdad3099ebec56a8T1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKJustificantePDF2107-ZWU18W.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
No malware configuration was found at this point.
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
7b918c8f9abfd1c3fdad3099ebec56a8 › JustificantePDF2107-ZWU18W.lnk
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with EssentialSign in or create a free account to view the matching YARA rules.
Create a free account