Malicious
5b7a14dcf3d344bf2f0ba994eccd00d3
ZIP Archive
MD5: 5b7a14dcf3d344bf2f0ba994eccd00d3
Size: 634 B
application/zip
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
ZIP archive
Size
634 B · 634 B
First seen
2026-08-03 08:30 · 2 months ago
Last seen
2026-08-03 08:30 · 2 months ago
Last analysis
2026-08-03 08:30 · 2 months ago
Hashes
MD5
5b7a14dcf3d344bf2f0ba994eccd00d3
Sha1
7f54bdc5a89e6c7631d9e698a816fad47b8c61dd
Sha256
457a29f0811afba4ea08f999ddc52402c2e7c976fa1d74ca88e4fbb630c4873f
Sha384
7d0eb3acc369a2338a4e8cd9f4dacacffb4631e5e3f1d14fd71b0dd69a129847dfbab173fbe75b3bdcca74cf27f3f91c
Sha512
4964ef2274662f79574a0e7274f958c01b058ad5132b2a2a257fb094284b4010a5b3458ee62a805752dbf9c23e27d32944cc0b9a5ebafafc1b75d749b7caf575
SSDeep
12:5jDRiM76yv66ZZSNCW0H8mbmEJ04nkgXh3nghhjrAUWDc6clgaiM76caA:9DRiZ8vZZ7MhEJNkgXhEhjrAhDc6cSab
TLSH
4BF0231DA5CE8E91CD276835C240694811A1E110845B6327866E4391BB7DB080B5CAD8
3 malicious · 3 files
ZIP5b7a14dcf3d344bf2f0ba994eccd00d3T1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKContrato_Indeniza_Brasil-W9P0KX.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
arc:zip>lnk~T1059.003~T1202~T1204.002
Shape
arc:zip>lnk
malicious
2 nodes
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential3 malicious · 3 files
ZIP5b7a14dcf3d344bf2f0ba994eccd00d3T1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKContrato_Indeniza_Brasil-W9P0KX.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
No malware configuration was found at this point.
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
5b7a14dcf3d344bf2f0ba994eccd00d3 › Contrato_Indeniza_Brasil-W9P0KX.lnk
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with EssentialSign in or create a free account to view the matching YARA rules.
Create a free account