Malicious
b3a60fddf13ded5b5f0bdd0e18216261
ZIP Archive
MD5: b3a60fddf13ded5b5f0bdd0e18216261
Size: 610 B
application/zip
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
ZIP archive
Size
610 B · 610 B
Hashes
MD5
b3a60fddf13ded5b5f0bdd0e18216261
Sha1
92756d92b290d0101a540c5ea0a647674e26dc31
Sha256
a1a33c18829330783cdc59bbbc23b74ea1a362950d4f02f872c2b923d6411063
Sha384
f2b176cc2d6ccb1834c7b71dc19062dc78aec9c71dc41a5fb5a8379698bd7553b8473204ff2013355d085e121d5f1a6f
Sha512
dba08a2809df6761ec7db1ebc86d9b2cc513fd0194e7983d30f01ff81c15e5f2e4fb8cf59e4f7eb8c10ab1edd6452eb8d117b83dfb7a957556fdbcb261a828b0
SSDeep
12:5jt/K7AMA8jI18dNKeKwlCef0uewmrxwXNEu9EAqVDfo9X/KI2MAUaAn:9tC7AMrjFdNKt+ArwmFwXL9HGo9XC5Mh
TLSH
8DF047839314C747DD43E07BD7C9B1780E2B440E61589C79EBD9CAD058C1BC30E4D264
3 malicious · 3 files
ZIPb3a60fddf13ded5b5f0bdd0e18216261T1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKFazer_Reserva--GJRRFB.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
arc:zip>lnk~T1059.003~T1202~T1204.002
Shape
arc:zip>lnk
malicious
2 nodes
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential3 malicious · 3 files
ZIPb3a60fddf13ded5b5f0bdd0e18216261T1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKFazer_Reserva--GJRRFB.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
No malware configuration was found at this point.
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
b3a60fddf13ded5b5f0bdd0e18216261 › Fazer_Reserva--GJRRFB.lnk
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with EssentialSign in or create a free account to view the matching YARA rules.
Create a free account