Malicious
07b7727ae1071578aa78e1c8662c62a7
ZIP Archive
MD5: 07b7727ae1071578aa78e1c8662c62a7
Size: 638 B
application/zip
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
ZIP archive
Size
638 B · 638 B
First seen
2026-08-03 08:15 · 2 months ago
Last seen
2026-08-03 08:15 · 2 months ago
Last analysis
2026-08-03 08:15 · 2 months ago
Hashes
MD5
07b7727ae1071578aa78e1c8662c62a7
Sha1
e0acbc836ed65a7d4c4f8361555528d72621358f
Sha256
22cd8849ab41de7f3344a9a69c8e63beec406ae0f5237f2eda16cd7cb91ad5a5
Sha384
e356d80ab0047e31ef740fb6684a8b56b391da949b4892144f1319ffa8075e87c172e3cad5474529f02986ac909409d7
Sha512
6c31c88d125798580cbcafa92f9c75b169a786a3a2a66317bf6e35d04327e6f815e5abacbb889c5f4714b9a7fba7f3a73eac93c31565b7f54ae4cb969f76dded
SSDeep
12:5jMleRiM/UGGA8e34poAVEYCiSmnR+jZCAdoYH6KFMICRqNOdeB8BelPiM/8a0:9MoRisL8e34poAVEYpR+jZPdoO9ikNON
TLSH
5CF0DD6BD24E69EDDD03903762452F7B0933F593C8B82C1E815594A2B454B35DF40966
3 malicious · 3 files
ZIP07b7727ae1071578aa78e1c8662c62a7T1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKContrato_Indeniza_Brasil-8OPJ7H.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
arc:zip>lnk~T1059.003~T1202~T1204.002
Shape
arc:zip>lnk
malicious
2 nodes
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential3 malicious · 3 files
ZIP07b7727ae1071578aa78e1c8662c62a7T1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKContrato_Indeniza_Brasil-8OPJ7H.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
No malware configuration was found at this point.
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
07b7727ae1071578aa78e1c8662c62a7 › Contrato_Indeniza_Brasil-8OPJ7H.lnk
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with EssentialSign in or create a free account to view the matching YARA rules.
Create a free account