Malicious
Malicious

4f6e494d7bc9b1a841085842cf0f7086

ZIP Archive
MD5: 4f6e494d7bc9b1a841085842cf0f7086
Size: 924 B
application/zip
Ctrl + scroll to zoom · drag to pan

This sample is a 924 bytes ZIP Archive classified as malicious by Malva.RE (lolbin). Static analysis extracted 2 embedded or derived files. It matches 1 YARA rule. Observed behaviours map to MITRE ATT&CK T1059.003, T1202: INDIRECT COMMAND EXECUTION and T1204.002. The file was analysed statically: it was parsed and decompiled, never executed.

SHA256
e473d27adfdab0836b015cffd7392b678ab6aae32fe73233ab1a8f469e43d322
MD5
4f6e494d7bc9b1a841085842cf0f7086
Verdict
Malicious
File type
ZIP Archive · 924 bytes
Category
LOLBin

Cite this report: https://app.malva.re/sha256/e473d27adfdab0836b015cffd7392b678ab6aae32fe73233ab1a8f469e43d322

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential

File
Type
ZIP archive
Size
924 B · 924 B
First seen
2026-08-03 08:31 · 2 months ago
Last seen
2026-08-03 08:31 · 2 months ago
Last analysis
2026-08-03 08:31 · 2 months ago
Hashes
MD5 4f6e494d7bc9b1a841085842cf0f7086 Sha1 abc4c7300594c5bd7b503bf15acca716148c5b0f Sha256 e473d27adfdab0836b015cffd7392b678ab6aae32fe73233ab1a8f469e43d322 Sha384 f039ef67fa5b5d8aec1d92b0c67223149522b8e0c6eb850f7e1f125624e4cd19e28144f20c73ba6744fab632776a199b Sha512 ea108eb3a0c12207b857dc6c7af03762fea122569c16fa0502f221ea30f5349912c13d27437465ba5125a3cbdcd780f86eea2efb80eb74a66b76a4e544d4b860 SSDeep 24:9ZRiIWAqp0IPtYaaS4oxbeM/436yxo4j4mSn4i35:9ZRXWJp+S4oxbeM/46WKn40 TLSH C611447B507EF754DF66D93C806204B6151B1914C9A654E2511904D9BF64348272C1A6

3 malicious · 3 files
ZIP4f6e494d7bc9b1a841085842cf0f7086LOLBin
LNKContrato_Indeniza_Brasil-S2TGH1.lnkLOLBin
BIN[Lnk Summary]
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
Path arc:zip>lnk~T1059.003~T1202~T1204.002
Shape arc:zip>lnk
malicious 2 nodes

LNK: Command Execution UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential

3 malicious · 3 files
ZIP4f6e494d7bc9b1a841085842cf0f7086LOLBin
LNKContrato_Indeniza_Brasil-S2TGH1.lnkLOLBin
BIN[Lnk Summary]
No malware configuration was found at this point.

LNK: Command Execution UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
4f6e494d7bc9b1a841085842cf0f7086 › Contrato_Indeniza_Brasil-S2TGH1.lnk
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential
Sign in or create a free account to view the matching YARA rules. Create a free account
An error has occurred. This application may no longer respond until reloaded. Reload 🗙