Malicious
a9017267422ee882d54236a8c7d022b8
ZIP Archive
MD5: a9017267422ee882d54236a8c7d022b8
Size: 934 B
application/zip
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
ZIP archive
Size
934 B · 934 B
First seen
2026-08-03 13:46 · 2 months ago
Last seen
2026-08-03 13:46 · 2 months ago
Last analysis
2026-08-03 13:46 · 2 months ago
Hashes
MD5
a9017267422ee882d54236a8c7d022b8
Sha1
052d1c566c76d79fb5b64a3397ccf92796960a0e
Sha256
f7f26648325d4ba850769c52bcdde604ff122783e1e48eae16346f84748e0809
Sha384
48e433b86204b9917944eaf7fc9463e755bb2ed48bb86790fd567d5642c5dcd9bf6e990eb1e0e210bef5fdfa2bc5d45b
Sha512
a0c37777454ab00eca5545ca2fb35b4982b1e79497c98dbb44d8eea10131a0ac049332bb1b4967ff9476ab2e74f2d4a6a89d6731fee0b706189a18a9b6ab9264
SSDeep
24:9TDPmpRGrBU/s7b/URMXg7qvLxc6kpVBVw:9TURGrBgs7b/URUgG6/VBVw
TLSH
AE11B742309361A7C03B127021301E2112685A58349E8427E6B475D9EE339B047C2FB9
3 malicious · 3 files
ZIPa9017267422ee882d54236a8c7d022b8T1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKFirmaPeru-H4JE9G.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
arc:zip>lnk~T1059.003~T1202~T1204.002
Shape
arc:zip>lnk
malicious
2 nodes
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential3 malicious · 3 files
ZIPa9017267422ee882d54236a8c7d022b8T1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKFirmaPeru-H4JE9G.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
No malware configuration was found at this point.
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
a9017267422ee882d54236a8c7d022b8 › FirmaPeru-H4JE9G.lnk
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with EssentialSign in or create a free account to view the matching YARA rules.
Create a free account