Malicious
04302eb13c788e48060ffd87f3fb406d
ZIP Archive
MD5: 04302eb13c788e48060ffd87f3fb406d
Size: 638 B
application/zip
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
ZIP archive
Size
638 B · 638 B
First seen
2026-08-03 08:31 · 2 months ago
Last seen
2026-08-03 08:31 · 2 months ago
Last analysis
2026-08-03 08:31 · 2 months ago
Hashes
MD5
04302eb13c788e48060ffd87f3fb406d
Sha1
aba988d104ef76a5088f9349aafb212f7aef9f17
Sha256
8ba5d60eeafd2bec52353680a2cf9929749e464997a06e7ab33e1a49f88e42b7
Sha384
b1585dc4edbfd9fb61108f75082ab55787b6caadea6a65579fbe11df46edf7118a428d8e038ac6c1a5699c630d7540d6
Sha512
4fa9d788234b74231ef2b0d0b86df91e4066af332a2cf027189ab87dd747271059eed14d7576344be944f480aed1f9e6049f949892359a5708c01e530d207111
SSDeep
12:5jOGRiMFC2B3ldlNJ6+HPh4mTLI7N5Rsz/0kEUR9q7xBAIY0s2u2YniMFCYa0:9OGRiuPllf1qmTE7N5RVNUR9q7xBAIYb
TLSH
35F068B7780D9302F9267135444117940CB05744CA96774E8370A76BD154BC04727718
3 malicious · 3 files
ZIP04302eb13c788e48060ffd87f3fb406dT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKContrato_Indeniza_Brasil-YGIO5B.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
arc:zip>lnk~T1059.003~T1202~T1204.002
Shape
arc:zip>lnk
malicious
2 nodes
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential3 malicious · 3 files
ZIP04302eb13c788e48060ffd87f3fb406dT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKContrato_Indeniza_Brasil-YGIO5B.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
No malware configuration was found at this point.
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
04302eb13c788e48060ffd87f3fb406d › Contrato_Indeniza_Brasil-YGIO5B.lnk
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with EssentialSign in or create a free account to view the matching YARA rules.
Create a free account