Malicious
ZIP Archive
MD5: c73a5a94b49ce4fc4a375a329c676b0d
Size: 816 B
application/zip
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
ZIP archive
Size
816 B · 816 B
First seen
2026-08-03 13:46 · 2 months ago
Last seen
2026-08-03 13:46 · 2 months ago
Last analysis
2026-08-03 13:46 · 2 months ago
Hashes
MD5
c73a5a94b49ce4fc4a375a329c676b0d
Sha1
d307c7a20d508a7b9529a9d63cc8091760e65844
Sha256
68f20441c907989b21378b9a4a72eab374beb301abaecdd6b9f02082ab1e94d6
Sha384
d0a6497fab8505c867bca5e7fa1e7f45cbbfbc812078d5357c47c88ab3e11563a1b5479770e2f2cdf1d94afd81b5525f
Sha512
261a6c6ced50a05f1301fccc03f57e2996c5f840337feba2eada7c46afaa906e8f58f4421704f7290970ecae1bbe47683058ef6ba8f6f732ac9d85608d1b30d1
SSDeep
24:944W5MqGOo0IjDIyiUUAVUhmLOft7k7E+:9vWm20oUqftg7E+
TLSH
83018610888BA5C3D453ED72161479CC2DF600E61D4B289120EC85B4E2E0B5B558A495
3 malicious · 3 files
ZIPc73a5a94b49ce4fc4a375a329c676b0dT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKFirmaPeru-PT227Y.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
arc:zip>lnk~T1059.003~T1202~T1204.002
Shape
arc:zip>lnk
malicious
2 nodes
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential