Malicious
24b7ae7437880a6aa27c4bad8d7c3247
ZIP Archive
MD5: 24b7ae7437880a6aa27c4bad8d7c3247
Size: 637 B
application/zip
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
ZIP archive
Size
637 B · 637 B
Hashes
MD5
24b7ae7437880a6aa27c4bad8d7c3247
Sha1
e1f7ab3eda348c4e16d6cd459c8efcf691a8250e
Sha256
480a3428912f37a4f15dca993e246317079665571138af281925c8ecb3ac1a14
Sha384
acf4a4bf09fcc90449e759010fff5d6de664141aaf3451d1a6a93b0df8507a31375660b18d4af987012ffbbc29c80305
Sha512
ebf73e5cd2013e7e23b93e1ae7a77d630b6671ae017a57473bfb414760f3896abf38ad79a24128061667c51ef933b14fa0e011f45dbd173bb3684735e020ad51
SSDeep
12:5jqoRiMjrL+IphgXg8H2Qzl3Pv15X449/kJ0nnK6nkda0JmcckFiMjrL6a7:9qoRisL+UhTQztPN742KGkJJckFisLN
TLSH
5FF0DD6F9F5653B4C743E23203872E559A318AA784679E62C0F9382AE4A0B641677B01
3 malicious · 3 files
ZIP24b7ae7437880a6aa27c4bad8d7c3247T1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKContrato_Indeniza_Brasil-CW4L6B.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
arc:zip>lnk~T1059.003~T1202~T1204.002
Shape
arc:zip>lnk
malicious
2 nodes
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential3 malicious · 3 files
ZIP24b7ae7437880a6aa27c4bad8d7c3247T1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKContrato_Indeniza_Brasil-CW4L6B.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
No malware configuration was found at this point.
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
24b7ae7437880a6aa27c4bad8d7c3247 › Contrato_Indeniza_Brasil-CW4L6B.lnk
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with EssentialSign in or create a free account to view the matching YARA rules.
Create a free account