Malicious
ab5e45eaaa59555b30220295fd33630a
ZIP Archive
MD5: ab5e45eaaa59555b30220295fd33630a
Size: 744 B
application/zip
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
ZIP archive
Size
744 B · 744 B
First seen
2026-08-03 13:46 · 2 months ago
Last seen
2026-08-03 13:46 · 2 months ago
Last analysis
2026-08-03 13:46 · 2 months ago
Hashes
MD5
ab5e45eaaa59555b30220295fd33630a
Sha1
6fa9deff771a9459bf781c5807b0b540e6d74383
Sha256
a9b0af52a7fc3d8dfbf05846f9d28f1861d93ea9c321cc069039ae36da4e534f
Sha384
06086909bc586c07be856f9b0bf11dee6b490c8017f65e4ca918f67576f25382cf7bbe3f31861677fa78287decccb0c8
Sha512
aaf447e77b9e61d9283c93a3d4fda2433b5c91cb665e4328386f64a7cb1be4b1a425fe7949e40153282be2359d790651c7855c32112480f2786f8edf4b640c69
SSDeep
12:5jnySkBp01Z8vANkIjbtaDqQqMhYH9uB09VHSiQvjZKe8cZBKVFGnu2uebNtPpm7:9ySc8Z8vi1nqqiuduMczvjXBKzn2ZtR+
TLSH
5701653624477377E66613371F00C14819470C3B3407749E116CB44C624C68CB6ABB88
3 malicious · 3 files
ZIPab5e45eaaa59555b30220295fd33630aT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKFirmaPeru-SX7PMJ.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
arc:zip>lnk~T1059.003~T1202~T1204.002
Shape
arc:zip>lnk
malicious
2 nodes
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential3 malicious · 3 files
ZIPab5e45eaaa59555b30220295fd33630aT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKFirmaPeru-SX7PMJ.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
No malware configuration was found at this point.
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
ab5e45eaaa59555b30220295fd33630a › FirmaPeru-SX7PMJ.lnk
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with EssentialSign in or create a free account to view the matching YARA rules.
Create a free account