Malicious
560d12c0ada751f785e4d79b9c5d9c34
ZIP Archive
MD5: 560d12c0ada751f785e4d79b9c5d9c34
Size: 632 B
application/zip
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
ZIP archive
Size
632 B · 632 B
First seen
2026-08-03 08:31 · 2 months ago
Last seen
2026-08-03 08:31 · 2 months ago
Last analysis
2026-08-03 08:31 · 2 months ago
Hashes
MD5
560d12c0ada751f785e4d79b9c5d9c34
Sha1
0c73b196b30b7edd5ad516cf6ac100f12234391a
Sha256
02dd46877c3df5e84daaa07dd2c332b0327c2e521186bb20ce7a0dcb901dcb4b
Sha384
097e835b03adb671b3f95a781f019f29d0bbea60099660ce2d7a2d907aadadb1b9bb38e25c58d809701d3fb0136d9ef4
Sha512
c889360db894af448c09aa4f7e8cc088478619cae8dabc6a68114259601dea94c74a6c0a75272e25567b8ca01ab569fae8162f316362deb6c55f6071447a45ba
SSDeep
12:5jAboRiMlm6jeIKK3jchz8KGwL6S20WTBTZlbr7CK9IyAzHeUPPg9k+bFiMlm6a+:9A8RicvjelwjchzdNmSUTb8o4zl49k+p
TLSH
69F0C88F031FE214DB92C0F3E99931D0C662B34CC588621204317C87C4F37591D40492
3 malicious · 3 files
ZIP560d12c0ada751f785e4d79b9c5d9c34T1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKContrato_Indeniza_Brasil-UJ1CH6.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
arc:zip>lnk~T1059.003~T1202~T1204.002
Shape
arc:zip>lnk
malicious
2 nodes
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential3 malicious · 3 files
ZIP560d12c0ada751f785e4d79b9c5d9c34T1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKContrato_Indeniza_Brasil-UJ1CH6.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
No malware configuration was found at this point.
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
560d12c0ada751f785e4d79b9c5d9c34 › Contrato_Indeniza_Brasil-UJ1CH6.lnk
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with EssentialSign in or create a free account to view the matching YARA rules.
Create a free account