Malicious
da05b80250902de206dec669f16f9a1d
ZIP Archive
MD5: da05b80250902de206dec669f16f9a1d
Size: 868 B
application/zip
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
ZIP archive
Size
868 B · 868 B
First seen
2026-08-03 13:45 · 2 months ago
Last seen
2026-08-03 13:45 · 2 months ago
Last analysis
2026-08-03 13:45 · 2 months ago
Hashes
MD5
da05b80250902de206dec669f16f9a1d
Sha1
7d9a74ee8509a4e9167b059b51186dd53c536a98
Sha256
8858e0daa5a3ce0fb0c80af6e8df3bf0d29d27a381297032b49b51f22dea244a
Sha384
dfdd99f07092eb65f48067ce6aef1f9e1f8e5b0b5a8ac9d8f0235933d2ed844101391899126e47f7f4b2988c11a8a955
Sha512
0c062ae6acdcaa2b343b7018281303aa98b87f10032a298f3b8ff6dcaa6bc35f62563861ba3fedba05c19f3be7826e23c4b420574d7a94a4a2ba946536f69144
SSDeep
24:9i+lJ4BUv7u4dj+pCFllcqfZetv6EM3ccI:9i+RTBx+pmrwSQcI
TLSH
72119668DC453D62E58F0AF38847D2E41D0CD9424A0D4D2A38AC725B2C229FEA162D80
3 malicious · 3 files
ZIPda05b80250902de206dec669f16f9a1dT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKFirmaPeru-0ML9MG.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
arc:zip>lnk~T1059.003~T1202~T1204.002
Shape
arc:zip>lnk
malicious
2 nodes
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential3 malicious · 3 files
ZIPda05b80250902de206dec669f16f9a1dT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKFirmaPeru-0ML9MG.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
No malware configuration was found at this point.
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
da05b80250902de206dec669f16f9a1d › FirmaPeru-0ML9MG.lnk
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with EssentialSign in or create a free account to view the matching YARA rules.
Create a free account