Malicious
aa37d41d4786527ce766d6a65acc7349
ZIP Archive
MD5: aa37d41d4786527ce766d6a65acc7349
Size: 597 B
application/zip
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
ZIP archive
Size
597 B · 597 B
First seen
2026-08-03 12:22 · 2 months ago
Last seen
2026-08-03 12:22 · 2 months ago
Last analysis
2026-08-03 12:22 · 2 months ago
Hashes
MD5
aa37d41d4786527ce766d6a65acc7349
Sha1
1524a652796b6e5143107a9450c009e6e0ab5e16
Sha256
24176a7ba189475c071a51985571278c231565d894bb4638a51095ab7c70891e
Sha384
7b8a7ed7847b2ec7b7e94ec2bfc8a88944494d918fe0be025505712199108d6a3cb4c046cbb007504b4cd1422b62d8a4
Sha512
6c91784c0faade1b3bf30ffbb7c6c57af0d529e8813ae1b0dc9bce0971add8cfeb470155326dc9b58bfdb9f93bcde07a283bc01e80d9937d7a7c9eec4222b906
SSDeep
12:5jOvhgsD/sa/TPoSKFFhuOLFLqCQktg7XgJR+l3mjUL9+uexYovhbdsDxaw:98qY/sI7oZhuOLFLVT2wm8UMLxYyzYL
TLSH
E7F0ACF317B09996C4710D746F583B1151B9D4AE648722892A1D941B36914FA8B8E0D9
3 malicious · 3 files
ZIPaa37d41d4786527ce766d6a65acc7349T1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKNota_FISCAL_-XUR97S.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
arc:zip>lnk~T1059.003~T1202~T1204.002
Shape
arc:zip>lnk
malicious
2 nodes
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential3 malicious · 3 files
ZIPaa37d41d4786527ce766d6a65acc7349T1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKNota_FISCAL_-XUR97S.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
No malware configuration was found at this point.
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
aa37d41d4786527ce766d6a65acc7349 › Nota_FISCAL_-XUR97S.lnk
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with EssentialSign in or create a free account to view the matching YARA rules.
Create a free account