Malicious
c95d27e2169212774485876538ca6921
ZIP Archive
MD5: c95d27e2169212774485876538ca6921
Size: 608 B
application/zip
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
ZIP archive
Size
608 B · 608 B
First seen
2026-08-03 13:21 · 2 months ago
Last seen
2026-08-03 13:21 · 2 months ago
Last analysis
2026-08-03 13:21 · 2 months ago
Hashes
MD5
c95d27e2169212774485876538ca6921
Sha1
b24402835140e65be2863e815fef1a2b52378050
Sha256
e7d1d6470042e4b849f6cced07e1313e3ec705ec7668f68fe556eb57444de578
Sha384
e89144bf877b18ae9bc49b9f506bd7155f2eb8752f1dcf85c85f3311bfa6fe9d24c34142cc551061bbff5d40f0cccb6e
Sha512
4fbe4c5c514257c77c3862e4a4b546141d501fd7739c2f3a248da5b69fc4b99245dbb95280e1f26b11fda2fbd9222fbdc61793ed7eaf74ab7b78e4bf943b49d1
SSDeep
12:5j0S45Oxguecxqn+o2uV7WR1pYhVjVnnrbVn5pc9FaDlVao:9Jx2+3M6R3aVjNnrhn5pc3ct
TLSH
5EF09D728E9261DFC4757133710311969C4035D3D23E46FBF412114B7D182DC5E5F850
3 malicious · 3 files
ZIPc95d27e2169212774485876538ca6921T1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKFatura Eletronica-3GMCJP.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
arc:zip>lnk~T1059.003~T1202~T1204.002
Shape
arc:zip>lnk
malicious
2 nodes
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential3 malicious · 3 files
ZIPc95d27e2169212774485876538ca6921T1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKFatura Eletronica-3GMCJP.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
No malware configuration was found at this point.
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
c95d27e2169212774485876538ca6921 › Fatura Eletronica-3GMCJP.lnk
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with EssentialSign in or create a free account to view the matching YARA rules.
Create a free account