Malicious
58db087dda74461b0e3a04eb5ab657ea
ZIP Archive
MD5: 58db087dda74461b0e3a04eb5ab657ea
Size: 867 B
application/zip
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
ZIP archive
Size
867 B · 867 B
First seen
2026-08-03 08:46 · 2 months ago
Last seen
2026-08-03 08:46 · 2 months ago
Last analysis
2026-08-03 08:46 · 2 months ago
Hashes
MD5
58db087dda74461b0e3a04eb5ab657ea
Sha1
85b0013aff4e2bf437e37888b63fa9c74dd628fa
Sha256
4f2cb11add688d5338791ad5862c6a9dd04dca5313f80ff23d1a924f1ebbc2b0
Sha384
bf9ccf93a49e2bb30545a3ad7f3f4427716d1b52724ae01760fbd07f5441a851bb9b65bac41924611ac41b445d9a3128
Sha512
979f6fa2d680c083ae99986b59b3bf4633b0375cf087649d47f6e9a979250608e4659ac40e4e2aac0b243ab54efa499356b8330be67d18c07d378f0b779e9e20
SSDeep
24:9NGHRib0lnWxQSa58oZoDF9Rk010b2vEbgfCRcZZsmaXGYib0E:9NGHRBl6QfarF9R910A6aZZsmaXGYBE
TLSH
01119685E28FB026CD4BBA3A529714F86435C58505AC71940487AD78F7D4F419ED7378
3 malicious · 3 files
ZIP58db087dda74461b0e3a04eb5ab657eaT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKContrato_Indeniza_Brasil-955N8R.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
arc:zip>lnk~T1059.003~T1202~T1204.002
Shape
arc:zip>lnk
malicious
2 nodes
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential3 malicious · 3 files
ZIP58db087dda74461b0e3a04eb5ab657eaT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKContrato_Indeniza_Brasil-955N8R.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
No malware configuration was found at this point.
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
58db087dda74461b0e3a04eb5ab657ea › Contrato_Indeniza_Brasil-955N8R.lnk
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with EssentialSign in or create a free account to view the matching YARA rules.
Create a free account