Malicious
af4424b578275a20eee192bfc00390c1
ZIP Archive
MD5: af4424b578275a20eee192bfc00390c1
Size: 839 B
application/zip
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
ZIP archive
Size
839 B · 839 B
Hashes
MD5
af4424b578275a20eee192bfc00390c1
Sha1
eb6eb2361fa78b5af3555c214c077974d82b93fc
Sha256
4638bd344148c1d0f7b884a62c3a1f07ad88e5320edb72aa956cad7b1eeda2ec
Sha384
2157cf83ace0128911f22c002bb559c0c56b6a887b0860df945d98b8961ce2dd8e1dd74a6aeee374735ae856f9c5a2e0
Sha512
6e239fbebed6744f72761d2065eafd6b179b95400ce23c1b09d3a2f4454596281249a3d9fa189ea9a258a520b37bf88532a7920b0a249083c20706a1880a62bd
SSDeep
24:9ls7ptdPezrB/1/nH545IU0G6RGmS57UO:94puzrBpHNGkGhYO
TLSH
8D0181BB46A21743C392DA3364471E4DF2290850E338E0493EA6A00F2D0F8CD6BC6C52
3 malicious · 3 files
ZIPaf4424b578275a20eee192bfc00390c1T1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKFirmaPeru-U6YNWT.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
arc:zip>lnk~T1059.003~T1202~T1204.002
Shape
arc:zip>lnk
malicious
2 nodes
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential3 malicious · 3 files
ZIPaf4424b578275a20eee192bfc00390c1T1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKFirmaPeru-U6YNWT.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
No malware configuration was found at this point.
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
af4424b578275a20eee192bfc00390c1 › FirmaPeru-U6YNWT.lnk
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with EssentialSign in or create a free account to view the matching YARA rules.
Create a free account