Malicious
5ec573cb1e27bffded42cfa788d6c3fe
ZIP Archive
MD5: 5ec573cb1e27bffded42cfa788d6c3fe
Size: 643 B
application/zip
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
ZIP archive
Size
643 B · 643 B
First seen
2026-08-03 08:30 · 2 months ago
Last seen
2026-08-03 08:30 · 2 months ago
Last analysis
2026-08-03 08:30 · 2 months ago
Hashes
MD5
5ec573cb1e27bffded42cfa788d6c3fe
Sha1
a4786c79896e5d738525b4e2884ea83b8d8fb72e
Sha256
639123eea3bc034f0562ee95e1e876a404c99d58f2b63ea3ae750a069aec1e89
Sha384
eaee16542f7ffd55fe509bd668ec6e7c2d88546a8a10026d83cb75fb3d9604d060dfe0e6c8f5efb922399dccb7ae36ab
Sha512
4d489f4a1950b975bf4a2c21d0222beffeb7231c1ff8d2dddba4d3c4fa8dec177c76ced01d4e7f31880ef4d1578547feb19ef6f50f11a438d8f1b730572c5509
SSDeep
12:5j+/RiMcIIWae8LbUxbNiVnz2GC1AIoiNRnBvWYjBEhHcaStVmBQAiMgaJ:9+/Rih/lbi8tUAIoiDZOhHcaStMBQAi6
TLSH
B8F06857D118498BCD0FF77139C71D94996CA25F493C0252A074DA59CB98B049487A95
3 malicious · 3 files
ZIP5ec573cb1e27bffded42cfa788d6c3feT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKContrato_Indeniza_Brasil-CDUW4M.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
arc:zip>lnk~T1059.003~T1202~T1204.002
Shape
arc:zip>lnk
malicious
2 nodes
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential3 malicious · 3 files
ZIP5ec573cb1e27bffded42cfa788d6c3feT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKContrato_Indeniza_Brasil-CDUW4M.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
No malware configuration was found at this point.
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
5ec573cb1e27bffded42cfa788d6c3fe › Contrato_Indeniza_Brasil-CDUW4M.lnk
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with EssentialSign in or create a free account to view the matching YARA rules.
Create a free account