Malicious
0927f55c7287205535e3d0339bc6334a
ZIP Archive
MD5: 0927f55c7287205535e3d0339bc6334a
Size: 640 B
application/zip
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
ZIP archive
Size
640 B · 640 B
First seen
2026-08-03 08:15 · 2 months ago
Last seen
2026-08-03 08:15 · 2 months ago
Last analysis
2026-08-03 08:15 · 2 months ago
Hashes
MD5
0927f55c7287205535e3d0339bc6334a
Sha1
1432d3095662fbccb9bab44043891bc754165755
Sha256
c17956820eca1e017fad4c4011088d22873aec84fa3618cfc797074d09184137
Sha384
65902aa6047c0bda0c4a630e89f905cf6da246bf27e42ca8507fb0034894040edf27ed6a6b06ddbd12d7dc589e00227b
Sha512
c97549d1f096ad5c0cef606f9b948df7257b017ceeaa5cbf61b7df425ec7b78e57544513eeafb9defd2f8856b96616971dbc8fc58e10604b135261c164235478
SSDeep
12:5jX2xRiMGC0iWZ3E/JSXx/d+1qrPRciXtjdiZDzc9gI0UR22iMhaW:9uRi3CCREkXx01qNcmdiivtiu
TLSH
0BF062696039CF44CD3E9035994034E28070A691E9227093D36816CC8CCF7D1CA9A640
3 malicious · 3 files
ZIP0927f55c7287205535e3d0339bc6334aT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKContrato_Indeniza_Brasil-NSE8IV.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
arc:zip>lnk~T1059.003~T1202~T1204.002
Shape
arc:zip>lnk
malicious
2 nodes
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential3 malicious · 3 files
ZIP0927f55c7287205535e3d0339bc6334aT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKContrato_Indeniza_Brasil-NSE8IV.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
No malware configuration was found at this point.
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
0927f55c7287205535e3d0339bc6334a › Contrato_Indeniza_Brasil-NSE8IV.lnk
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with EssentialSign in or create a free account to view the matching YARA rules.
Create a free account