Malicious
a5de0c25de9cf936b8ac026b27dc50fd
ZIP Archive
MD5: a5de0c25de9cf936b8ac026b27dc50fd
Size: 832 B
application/zip
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
ZIP archive
Size
832 B · 832 B
First seen
2026-08-03 13:45 · 2 months ago
Last seen
2026-08-03 13:45 · 2 months ago
Last analysis
2026-08-03 13:45 · 2 months ago
Hashes
MD5
a5de0c25de9cf936b8ac026b27dc50fd
Sha1
cd16bbf2aedc560e2c8c201295a71fba9e72ed24
Sha256
84129eec2e18d5fc0e7726fc107930756706b7ebb80eae3b32ce722a05467754
Sha384
2c59bfa34a054484168de2d8efcb370fddb359c1bc5e624ce94394164aa8f21a1a64856bcd5cb88c7ac656189e0c348c
Sha512
9445f8430fa7c55d060a04791b455b6aff440f6e81d250ee7acd1b23cec00d3de791a2aebcb622b562704ea3ea07e53f9acddfa179c4944a0d866efb62c85a2f
SSDeep
24:9kGXq5Fgi9sX1RD5UGUdpk2rQDrCIEhyGTz9GLR1MrLxlTkrDyXG:97Agi9K4xwrCV5Tz9GF+WDyW
TLSH
580186B11E9B0A80F14A41703C87033C454E722414D4D6C3EF1AA2AD9731C5BBBC0C26
3 malicious · 3 files
ZIPa5de0c25de9cf936b8ac026b27dc50fdT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKFirmaPeru-VKFR9V.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
arc:zip>lnk~T1059.003~T1202~T1204.002
Shape
arc:zip>lnk
malicious
2 nodes
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential3 malicious · 3 files
ZIPa5de0c25de9cf936b8ac026b27dc50fdT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKFirmaPeru-VKFR9V.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
No malware configuration was found at this point.
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
a5de0c25de9cf936b8ac026b27dc50fd › FirmaPeru-VKFR9V.lnk
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with EssentialSign in or create a free account to view the matching YARA rules.
Create a free account