Malicious
4e74372c054b5e09811dfabe0ab2f9c3
ZIP Archive
MD5: 4e74372c054b5e09811dfabe0ab2f9c3
Size: 626 B
application/zip
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
ZIP archive
Size
626 B · 626 B
Hashes
MD5
4e74372c054b5e09811dfabe0ab2f9c3
Sha1
88f6b8fd72e3f91805610016985ac92181024259
Sha256
5a62734b1a03056ad49d4c888f0fbabf7ea8a511f1dd5a7a37089f8bc1142040
Sha384
a2c8f89c023c3d0a0725fbbee9ff00ff97df89187069775fcdfe212d811bdc7bac1c33f01f670ed05b6885a5a07cbdc0
Sha512
f84a1bc9a37034ecd80ecc71a481bbcdee08e96ba3fa94b21eae44c8542859cbff771e45c124dd54f96b971f1352dcf65f4ac22633126d4dee8e93e4bb5ea3fa
SSDeep
12:5jwRiM+K/9wh3MYZManUGL40anvJ1Mnqz6bWx671oZkPiM+Pao:9wRipK/9whcYZRUGLlJIaWx671o6Pipd
TLSH
7AF062BD530E567AEE1BD430288500B43E701700D2392F8A80B860D3E0B3980067E984
3 malicious · 3 files
ZIP4e74372c054b5e09811dfabe0ab2f9c3T1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKContrato_Indeniza_Brasil-GHAFXT.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
arc:zip>lnk~T1059.003~T1202~T1204.002
Shape
arc:zip>lnk
malicious
2 nodes
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential3 malicious · 3 files
ZIP4e74372c054b5e09811dfabe0ab2f9c3T1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKContrato_Indeniza_Brasil-GHAFXT.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
No malware configuration was found at this point.
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
4e74372c054b5e09811dfabe0ab2f9c3 › Contrato_Indeniza_Brasil-GHAFXT.lnk
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with EssentialSign in or create a free account to view the matching YARA rules.
Create a free account