Malicious
ZIP Archive
MD5: c8a3f0929419edb4c2b79b09385274a8
Size: 817 B
application/zip
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
ZIP archive
Size
817 B · 817 B
First seen
2026-08-03 13:45 · 2 months ago
Last seen
2026-08-03 13:45 · 2 months ago
Last analysis
2026-08-03 13:45 · 2 months ago
Hashes
MD5
c8a3f0929419edb4c2b79b09385274a8
Sha1
dfbb428766910f6a30d78f4d61ef36cc31606bc1
Sha256
6acb2b5fe3cd889eb9dad2a48c9df8d4d2a3bd690e302bb165c5903b652ccd73
Sha384
7b359452d9e4035e76c581df99b4831126229577d77807cedf06b06957e3df2c9f6463098bd13804c338c84c83e9b8f1
Sha512
273f51bd7d19c8325fd6e156232df0e8805086d43eeeec75dec4968f92da6e8806614c814c65c3598f5aeb9e1af195ffa2f8d864aaeb25837762b9e4b44643b0
SSDeep
12:5jNkoupxlZu/n1cpPQEBce66pEjFX9lshGCDPC1dxDpWrBoYDniMg6MY7dt7LoFG:9NRRdwq3s1qdxDpai/Wt70Y
TLSH
C601756F5C8B6157C268D471240C7755731FB2BF225A21063CAC0BEC618E9230F0F965
3 malicious · 3 files
ZIPc8a3f0929419edb4c2b79b09385274a8T1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKFirmaPeru-UN3XLH.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
arc:zip>lnk~T1059.003~T1202~T1204.002
Shape
arc:zip>lnk
malicious
2 nodes
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential