Malicious
2697979b367cb25c4ee06949929563e2
ZIP Archive
MD5: 2697979b367cb25c4ee06949929563e2
Size: 1.01 KB
application/zip
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
ZIP archive
Size
1.01 KB · 1,007 B
First seen
2026-08-03 08:46 · 2 months ago
Last seen
2026-08-03 08:46 · 2 months ago
Last analysis
2026-08-03 08:46 · 2 months ago
Hashes
MD5
2697979b367cb25c4ee06949929563e2
Sha1
e67b2e0aad5a48627083d578897bab54005157f9
Sha256
d249efab5273f0bb7923af98c7b050e5a5a14863a47c795c93a30477a2330a4b
Sha384
0b39b9ec55c757ba40696ff890854135c5fcae816c06192a5043da9f58bd6fb70b989ab2476235434cd59f8b4b20e067
Sha512
6943506525413a55915ce0e24b3df0f797a5cda2312a9b718efd294c1f186d2c5d24f99f0658af7bdcf0e3921560f3602913a8d9a5ac6efa289e8aadddd73cdb
SSDeep
24:9yRi8u5zZmhSBv92boOmezXY5T7YJJQdAMoyLcrHjATaBFi8c/l:9yRizASIoOmeE5/GDM1+DATaBF+l
TLSH
A211A51ECD61AF34D90E803725483FAAC578C72884BCD023DB5CD6C7BA4750A4A57BE0
3 malicious · 3 files
ZIP2697979b367cb25c4ee06949929563e2T1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKContrato_Indeniza_Brasil-PHD83E.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
arc:zip>lnk~T1059.003~T1202~T1204.002
Shape
arc:zip>lnk
malicious
2 nodes
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential3 malicious · 3 files
ZIP2697979b367cb25c4ee06949929563e2T1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKContrato_Indeniza_Brasil-PHD83E.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
No malware configuration was found at this point.
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
2697979b367cb25c4ee06949929563e2 › Contrato_Indeniza_Brasil-PHD83E.lnk
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with EssentialSign in or create a free account to view the matching YARA rules.
Create a free account