Malicious
158e2b0ba9ccf8590f6e34dbc3c9fb65
ZIP Archive
MD5: 158e2b0ba9ccf8590f6e34dbc3c9fb65
Size: 638 B
application/zip
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
ZIP archive
Size
638 B · 638 B
First seen
2026-08-03 08:46 · 2 months ago
Last seen
2026-08-03 08:46 · 2 months ago
Last analysis
2026-08-03 08:46 · 2 months ago
Hashes
MD5
158e2b0ba9ccf8590f6e34dbc3c9fb65
Sha1
7b909bbf776186aa35a583851a7c64b258a6021d
Sha256
050d19be07db928ab014cb20999892a53be79255a7c52be34d42541dbb67d21e
Sha384
e433398578840feb4bb1dd3f6606e32d9aff39db26d54855ceff6b014f7804d8492e6409bced7cbf64224a363919dc97
Sha512
ab636dac8a1df6dd6d77fb24ff50f3ab6fbba6283f0e52afe165d9473109303ccf350fc74f44e03c98cdab623f3b176e59283d2a6da1daed50661ea52bca87d7
SSDeep
12:5jNRiM6eu3RXpkPv6SBRhW0sXU+g3DzAiNHUg8Y2aV36SSWBkiM6qa0:9NRideu3hpkPv6ghYUX3/1HD8AV36hWC
TLSH
87F0621EB12AC905CB3F82B30A002EE80435F1E1887C59FE1DE538AAB3F4A840F115A8
3 malicious · 3 files
ZIP158e2b0ba9ccf8590f6e34dbc3c9fb65T1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKContrato_Indeniza_Brasil-QVC7AO.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
arc:zip>lnk~T1059.003~T1202~T1204.002
Shape
arc:zip>lnk
malicious
2 nodes
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential3 malicious · 3 files
ZIP158e2b0ba9ccf8590f6e34dbc3c9fb65T1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKContrato_Indeniza_Brasil-QVC7AO.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
No malware configuration was found at this point.
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
158e2b0ba9ccf8590f6e34dbc3c9fb65 › Contrato_Indeniza_Brasil-QVC7AO.lnk
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with EssentialSign in or create a free account to view the matching YARA rules.
Create a free account