Malicious
9496be2f6667cc78de2ca62537f8d4ed
ZIP Archive
MD5: 9496be2f6667cc78de2ca62537f8d4ed
Size: 618 B
application/zip
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
ZIP archive
Size
618 B · 618 B
First seen
2026-08-03 12:19 · 2 months ago
Last seen
2026-08-03 12:19 · 2 months ago
Last analysis
2026-08-03 12:19 · 2 months ago
Hashes
MD5
9496be2f6667cc78de2ca62537f8d4ed
Sha1
294bbc10ccb69f6ccbb2d8696a0e01beff2a4c02
Sha256
06679e29d82fed607a695c4eb74ebb2e7737735ac5e917db9c8b375f28d664f8
Sha384
8faee9da78710deb66d31b809150c76d595fdcb5590dc05bd1876b1ed42e95d95c535267eb59693e54eb99884b66cada
Sha512
c98489f99f86e3e9c37e6817f13a673e1d10fa6395d58c5534171aea1b5cf2e8985237eb4e3c78add703ab78632174369aeef523dcfa6eaff5e1be4ba287601e
SSDeep
12:5j6ujyjDnovXOIQKsAv3FsJKbuL3OVf0drNv0eEszccujvjDYai:9XOj8fOI9sISIujOedrNvgsoFDjq
TLSH
02F041304E84847BD443B2FEC0A051A47F55C364AA197CBEEB386CB2E1546D28ACF0A2
3 malicious · 3 files
ZIP9496be2f6667cc78de2ca62537f8d4edT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKJustificantePDF2107-0HK3HS.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
arc:zip>lnk~T1059.003~T1202~T1204.002
Shape
arc:zip>lnk
malicious
2 nodes
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential3 malicious · 3 files
ZIP9496be2f6667cc78de2ca62537f8d4edT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKJustificantePDF2107-0HK3HS.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
No malware configuration was found at this point.
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
9496be2f6667cc78de2ca62537f8d4ed › JustificantePDF2107-0HK3HS.lnk
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with EssentialSign in or create a free account to view the matching YARA rules.
Create a free account