Malicious
e2379eed2aa27cb0e6c634c5962db22b
ZIP Archive
MD5: e2379eed2aa27cb0e6c634c5962db22b
Size: 812 B
application/zip
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
ZIP archive
Size
812 B · 812 B
First seen
2026-08-03 13:46 · 2 months ago
Last seen
2026-08-03 13:46 · 2 months ago
Last analysis
2026-08-03 13:46 · 2 months ago
Hashes
MD5
e2379eed2aa27cb0e6c634c5962db22b
Sha1
4bebcf882d86458271c5d840e7e718512b15ed08
Sha256
6d5b36875ddebb392087fc55922fde8844521515dcb439f52bee7c84090789b9
Sha384
76a179b1ade94890b6866bf7e7bff351216b20fb2e44b465a3e38d841d218b8f3a2231933c560a074746f1537707ed03
Sha512
363bd1a376076d2832a68e09fa46dc14bbcd2b5731a4a724ddba79dd21046bf5d1d21ed2a1bc27ce2d53f9802627b0207cc0256e32ab92d3b5985222fef50ff4
SSDeep
24:9Liit0qPZk1kjy2RCvlwyoaNLLigdwyTyOjENU5iJ0Z:9LiHzkjyaCdf3ihyP75iaZ
TLSH
E70186294C88D8E2DD0D153479646F68C0DE69756D03036A0437A4FA69060D38383E95
3 malicious · 3 files
ZIPe2379eed2aa27cb0e6c634c5962db22bT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKFirmaPeru-RO06HV.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
arc:zip>lnk~T1059.003~T1202~T1204.002
Shape
arc:zip>lnk
malicious
2 nodes
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential3 malicious · 3 files
ZIPe2379eed2aa27cb0e6c634c5962db22bT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKFirmaPeru-RO06HV.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
No malware configuration was found at this point.
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
e2379eed2aa27cb0e6c634c5962db22b › FirmaPeru-RO06HV.lnk
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with EssentialSign in or create a free account to view the matching YARA rules.
Create a free account