Malicious
4ab4c7cfb97f808b069fc4bb8b565c34
ZIP Archive
MD5: 4ab4c7cfb97f808b069fc4bb8b565c34
Size: 638 B
application/zip
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
ZIP archive
Size
638 B · 638 B
First seen
2026-08-03 08:31 · 2 months ago
Last seen
2026-08-03 08:31 · 2 months ago
Last analysis
2026-08-03 08:31 · 2 months ago
Hashes
MD5
4ab4c7cfb97f808b069fc4bb8b565c34
Sha1
7312c18bc305de70649a3d1682b702ca5b280284
Sha256
42bb2a2895815677c01e93f69d9d90d6ed0c0ca716c2d7e5e05169d86a9bff21
Sha384
dc3b62889d412aef56720db44efcf83c79a2751fd47e52e7e4c5c292943ebd17f01110ce5bdf586fc00b14d02807df0e
Sha512
ec2f5a2509b43c3989a21fd6fdfcdba8fb9f41776c23ea6d92111360e3367adf7f56f34abf9bc5ac81c12926ae6e66ac78f3df533371f336d0b661ef74540f6a
SSDeep
12:5jzlleRiMD2DftM0JhWfAtUFlSN7B/IPzdy25Yw1ezq56W29llPiMDYa0:9zloRiK24/FlSN7B/IPpyoYwIG56/9lI
TLSH
56F02DA995AFCE62D006C0B225032CF808B5EAA048174F40961A78E3B03CB808B55188
3 malicious · 3 files
ZIP4ab4c7cfb97f808b069fc4bb8b565c34T1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKContrato_Indeniza_Brasil-V5GH7S.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
arc:zip>lnk~T1059.003~T1202~T1204.002
Shape
arc:zip>lnk
malicious
2 nodes
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential3 malicious · 3 files
ZIP4ab4c7cfb97f808b069fc4bb8b565c34T1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKContrato_Indeniza_Brasil-V5GH7S.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
No malware configuration was found at this point.
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
4ab4c7cfb97f808b069fc4bb8b565c34 › Contrato_Indeniza_Brasil-V5GH7S.lnk
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with EssentialSign in or create a free account to view the matching YARA rules.
Create a free account