Malicious
ZIP Archive
MD5: f2b813c9c47e0483d83a4420a8211026
Size: 604 B
application/zip
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
ZIP archive
Size
604 B · 604 B
First seen
2026-08-03 12:34 · 2 months ago
Last seen
2026-08-03 12:34 · 2 months ago
Last analysis
2026-08-03 12:34 · 2 months ago
Hashes
MD5
f2b813c9c47e0483d83a4420a8211026
Sha1
7e054f9a6098a975eeb904ee7b65038e4a8f4b31
Sha256
1a8ac0fd9d82f1d48e25945bed0cb1d246d054f066ff306f380797c2085fc58d
Sha384
0bcd26aa63ce1d9cfe1ce463e08f1cc18f6326d3717dc19106a1b7848840b05d79e48f7007b5a66b132692fed7e45de9
Sha512
eeb2735a10a7249d717ae52f91729137375a236bc9aac0dd9f10d38b9d9da60765edc5a96dcb6d76d4b9ee7dd63168bc41179f221814f63aa71c57ad3b46efb6
SSDeep
12:5jgMWadZ2hiqpe9uCtrxZgghhVfWcfJjdo8dnhqhLbMI7ZdMWJaS:9gXadOiq8btX3V+uRu/YI7XX1
TLSH
73F04122E661C60DF876B07C3D9654C8200440431B479CD228BDA1F3D21EBCA4B88C15
3 malicious · 3 files
ZIPf2b813c9c47e0483d83a4420a8211026T1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKNota_Fiscal_-FEDL75.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
arc:zip>lnk~T1059.003~T1202~T1204.002
Shape
arc:zip>lnk
malicious
2 nodes
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential