Malicious
d009f91643db2ddaf5b9dbdd82a1e210
ZIP Archive
MD5: d009f91643db2ddaf5b9dbdd82a1e210
Size: 934 B
application/zip
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
ZIP archive
Size
934 B · 934 B
First seen
2026-08-03 13:21 · 2 months ago
Last seen
2026-08-03 13:21 · 2 months ago
Last analysis
2026-08-03 13:21 · 2 months ago
Hashes
MD5
d009f91643db2ddaf5b9dbdd82a1e210
Sha1
23daf1be8b5dde70bf4dc34b01bf63b049c553e9
Sha256
bafc55d201e6f1872ac951f964609949a0ee45a1160bff11cffe5b66bec36443
Sha384
0864fb624eea446fb0df662f3b2257251ff3876ebda7dc30c614bfb3bc96a3a3d46f28bc71ab6e967ae8d378b8bc6751
Sha512
6ed078fb9adbf4aba937b2aba4da664a25cfcdc5693f245330b329a16c9a9abd15ee3fa72ba3181a6fccd2de8f2aeeddcd10d9d97a751ee7dfaf6c9acdafdc73
SSDeep
24:9nYF+fjqzwfmnu6wEFh33J3pJDXkzKk8MIGqVSs7u3YNl:9YF+2cfmnlhZHDikjws7uo3
TLSH
D411B79F92DEF4D5E141ED7A74C02BB5DF480EDCF0D2A891DF90CA80BE7A6940415B06
3 malicious · 3 files
ZIPd009f91643db2ddaf5b9dbdd82a1e210T1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKFatura Eletronica-PFUUDP.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
arc:zip>lnk~T1059.003~T1202~T1204.002
Shape
arc:zip>lnk
malicious
2 nodes
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential3 malicious · 3 files
ZIPd009f91643db2ddaf5b9dbdd82a1e210T1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKFatura Eletronica-PFUUDP.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
No malware configuration was found at this point.
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
d009f91643db2ddaf5b9dbdd82a1e210 › Fatura Eletronica-PFUUDP.lnk
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with EssentialSign in or create a free account to view the matching YARA rules.
Create a free account