Malicious
3215c521e7c0a9862167b1c80988bb67
ZIP Archive
MD5: 3215c521e7c0a9862167b1c80988bb67
Size: 640 B
application/zip
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
ZIP archive
Size
640 B · 640 B
First seen
2026-08-03 08:30 · 2 months ago
Last seen
2026-08-03 08:30 · 2 months ago
Last analysis
2026-08-03 08:30 · 2 months ago
Hashes
MD5
3215c521e7c0a9862167b1c80988bb67
Sha1
08861a9eacfbeec763b860bb4cadcc5b7d2ad49f
Sha256
ba57b5fde0474a6563d814aec1bf52c00f37d5af1f41f9f1fadfeec2601a9818
Sha384
53ebfbd08df3559d3f87329fa8a06d729f56d080b599479d3d07387aabe5a27a9753e2c048b4a4c8378ae506443a43c4
Sha512
8d33f0d81fb39c6c24aeb763e7c7da944b74e7789c52b3efb1c689e6bb0b9b9c0159295258fa4808ca78d87297fbc20dc1ea212f7db30bf6adc41c1288e9fe0d
SSDeep
12:5jn52/eRiMyuKlY7MZcAo/IUvr9JbrzVfsvMWWPDBG4T5zM246Eu+cLV5maV36Sv:98eRiNuAYZAar9JPzyr6DA4T5zM24JKP
TLSH
B2F06857492DE251C332D174CE503BDC497A6C199D31E84795D698DA519CD011B34E31
3 malicious · 3 files
ZIP3215c521e7c0a9862167b1c80988bb67T1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKContrato_Indeniza_Brasil-KCTX9O.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
arc:zip>lnk~T1059.003~T1202~T1204.002
Shape
arc:zip>lnk
malicious
2 nodes
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential3 malicious · 3 files
ZIP3215c521e7c0a9862167b1c80988bb67T1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKContrato_Indeniza_Brasil-KCTX9O.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
No malware configuration was found at this point.
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
3215c521e7c0a9862167b1c80988bb67 › Contrato_Indeniza_Brasil-KCTX9O.lnk
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with EssentialSign in or create a free account to view the matching YARA rules.
Create a free account