Malicious
185460142c43b6064b6cfa43f7655c4b
ZIP Archive
MD5: 185460142c43b6064b6cfa43f7655c4b
Size: 642 B
application/zip
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
ZIP archive
Size
642 B · 642 B
First seen
2026-08-03 08:46 · 2 months ago
Last seen
2026-08-03 08:46 · 2 months ago
Last analysis
2026-08-03 08:46 · 2 months ago
Hashes
MD5
185460142c43b6064b6cfa43f7655c4b
Sha1
f8da2be5f30f953b7239252c427cf6b19b964678
Sha256
c98c0d2898eec27f7e21b295b6efbacdbd7130863e9e78259d1aff6f7e672ff2
Sha384
0064ed1b56c4052101dda7287ada9e6cc645b87de782c803f32b14954008e9c2a4bffcf6819bc5c38cc7eeb4794f460a
Sha512
e3992625852fb119065db2ccbcebb376a0cf6611b35769f6265ef1b05e9a0a6dd95e64c65ca6bd6b7391d029378fe228502045572daec89928507ed26772ba58
SSDeep
12:5jw/eRiM/qoUv/vpgcbdIJFo0gog/EgPprCBasII625eAy+9MnW/PiM/q2JaY/:9w/eRinoUdsFo0OxIasII6GX9uW/Ping
TLSH
59F02DA7A20AC625AF5AB031169639B06CBD9A4188173E17C06D889653FC3910C46972
3 malicious · 3 files
ZIP185460142c43b6064b6cfa43f7655c4bT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKContrato_Indeniza_Brasil-8TIPJZ.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
arc:zip>lnk~T1059.003~T1202~T1204.002
Shape
arc:zip>lnk
malicious
2 nodes
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential3 malicious · 3 files
ZIP185460142c43b6064b6cfa43f7655c4bT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKContrato_Indeniza_Brasil-8TIPJZ.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
No malware configuration was found at this point.
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
185460142c43b6064b6cfa43f7655c4b › Contrato_Indeniza_Brasil-8TIPJZ.lnk
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with EssentialSign in or create a free account to view the matching YARA rules.
Create a free account