Malicious
f89088d0fc8abd9b1d0e3b8cef253a94
ZIP Archive
MD5: f89088d0fc8abd9b1d0e3b8cef253a94
Size: 617 B
application/zip
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
ZIP archive
Size
617 B · 617 B
First seen
2026-08-03 08:48 · 2 months ago
Last seen
2026-08-03 08:48 · 2 months ago
Last analysis
2026-08-03 08:48 · 2 months ago
Hashes
MD5
f89088d0fc8abd9b1d0e3b8cef253a94
Sha1
3d54d83647342a75a6176e194ddca6c37bbfd97d
Sha256
ac254a9c63071d9566e5dbf2fb1e84fa31a06f06dd7712f9c87fbada2b8b124f
Sha384
833683ab160df62b6d10694c3dced6ed602f5d758b1210adf4a01a5a1ef0b968d9f208aa1908de1b60bb2499f68f6e34
Sha512
62f6f059ef25290f8724cb0ca1927f7b2f3d82ff9668bc22a810c96b90193fe0f38df0c19a94911790c2e7a6f42dc597121c35bbb62bad09fda0c713c09c3cfe
SSDeep
12:5jAiAMAP4z6SYzdwCcM1jdAhz1RKfA6p4WosbU3WUuC/bfET9g3UxKKCP2MAP40G:9HAMwa6S8W30SKfAc4WoQZ8ATiE1nMwe
TLSH
F7F047B68B31E024F63410B7326E734FD43904C6D5073E3B9B34A2A32254EE28B8202D
3 malicious · 3 files
ZIPf89088d0fc8abd9b1d0e3b8cef253a94T1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKFazer_Reserva--9D1GKP.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
arc:zip>lnk~T1059.003~T1202~T1204.002
Shape
arc:zip>lnk
malicious
2 nodes
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential3 malicious · 3 files
ZIPf89088d0fc8abd9b1d0e3b8cef253a94T1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKFazer_Reserva--9D1GKP.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
No malware configuration was found at this point.
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
f89088d0fc8abd9b1d0e3b8cef253a94 › Fazer_Reserva--9D1GKP.lnk
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with EssentialSign in or create a free account to view the matching YARA rules.
Create a free account