Malicious
5cb54d1cc8dad9b26fdda80a9b0a6176
ZIP Archive
MD5: 5cb54d1cc8dad9b26fdda80a9b0a6176
Size: 643 B
application/zip
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
ZIP archive
Size
643 B · 643 B
First seen
2026-08-03 08:31 · 2 months ago
Last seen
2026-08-03 08:31 · 2 months ago
Last analysis
2026-08-03 08:31 · 2 months ago
Hashes
MD5
5cb54d1cc8dad9b26fdda80a9b0a6176
Sha1
8db9821631d79953d477d672feee81da4970bddc
Sha256
cc2a80f337fff5c0bf7b924efb7013dd94301327da9c4ffc053b934b33ae3682
Sha384
bf5f5bdcd22699a2071803c6c427b2470656a9cd48dea43fa0b7b76a86026b50b95d58219d0c1390e4fb84d1458b5b89
Sha512
1e318fcd56a249c1417c917b64737ceb9994e5861c31822998eb79baadc0a902165905164ecc9f2aafda6882ad88433b8b9fcaee374bf09c2df38a37d9a9db87
SSDeep
12:5jDURiMK+7pRDJenqjWsORfOz+zkkZXI8f55Nl1AGnd5iMKuaJ:9ARiV+jJeqrAOzEhfPeGnziVT
TLSH
7DF0FE8F604DC809C409A03734A33FA52E70F10300B45BA5D59C35A1DCA11844FA0F5A
3 malicious · 3 files
ZIP5cb54d1cc8dad9b26fdda80a9b0a6176T1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKContrato_Indeniza_Brasil-V7DCHQ.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
arc:zip>lnk~T1059.003~T1202~T1204.002
Shape
arc:zip>lnk
malicious
2 nodes
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential3 malicious · 3 files
ZIP5cb54d1cc8dad9b26fdda80a9b0a6176T1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKContrato_Indeniza_Brasil-V7DCHQ.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
No malware configuration was found at this point.
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
5cb54d1cc8dad9b26fdda80a9b0a6176 › Contrato_Indeniza_Brasil-V7DCHQ.lnk
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with EssentialSign in or create a free account to view the matching YARA rules.
Create a free account