Malicious
41d7938cc7672baf165824fbe48fb753
ZIP Archive
MD5: 41d7938cc7672baf165824fbe48fb753
Size: 640 B
application/zip
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
ZIP archive
Size
640 B · 640 B
First seen
2026-08-03 08:15 · 2 months ago
Last seen
2026-08-03 08:15 · 2 months ago
Last analysis
2026-08-03 08:15 · 2 months ago
Hashes
MD5
41d7938cc7672baf165824fbe48fb753
Sha1
0c2a31a02640aecf31fa8a59838842237fd3145f
Sha256
2d5ff46e87ed9a500aa24ed0130de6e4774586980137dbcb0d16f83a73e2a5e9
Sha384
2f56a8550c87fe323d9f78209ce2d843ae1fa8ed5162179de140a54395884101390f799e84dddd60624ce306adc54a56
Sha512
bc32e09a9496e6ebf7001be87166487a11230b7f1dda9949d4e7d8757933cf947784dcc246047a573c0dc02d8ac77f8b094b3ad29e6e27701185aab4ee071a87
SSDeep
12:5j6RiMjGFE7MmFqSKfh3Sh1WVF/9UY2GUabhV+xh35HZXufvYPdV9iMbaW:96RiPFEJFqS83ZVFFWatG3DXbPdV9iU
TLSH
64F0683F9057CC19DA31947404037A72007ADF310DB539D7C72863A55D5FE41D640651
3 malicious · 3 files
ZIP41d7938cc7672baf165824fbe48fb753T1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKContrato_Indeniza_Brasil-T1DE7X.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
arc:zip>lnk~T1059.003~T1202~T1204.002
Shape
arc:zip>lnk
malicious
2 nodes
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential3 malicious · 3 files
ZIP41d7938cc7672baf165824fbe48fb753T1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKContrato_Indeniza_Brasil-T1DE7X.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
No malware configuration was found at this point.
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
41d7938cc7672baf165824fbe48fb753 › Contrato_Indeniza_Brasil-T1DE7X.lnk
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with EssentialSign in or create a free account to view the matching YARA rules.
Create a free account