Malicious
64b9c97e362a935472ce0bf8b627055f
ZIP Archive
MD5: 64b9c97e362a935472ce0bf8b627055f
Size: 642 B
application/zip
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
ZIP archive
Size
642 B · 642 B
First seen
2026-08-03 08:30 · 2 months ago
Last seen
2026-08-03 08:30 · 2 months ago
Last analysis
2026-08-03 08:30 · 2 months ago
Hashes
MD5
64b9c97e362a935472ce0bf8b627055f
Sha1
8b84af051f2be356920c37a25e1e85d7358bc6d5
Sha256
c52c47ea435e0ee6c27d2ddde9521734630fb71af7741eefa9647e97e252e938
Sha384
4d03f7fb7c984cb5fa620edea75d125edd4e4b87c9c6a253da8dffd49e5efc2f1b7d1fcd73fc5dc870501be858c2b16f
Sha512
0239f7b1e19b78e80cc94ee0ac048f71d0cdcf68e1c9e00e5d44392a5df0e14aef0bd906e4922072c768ceb8d82bc700a28581f8b5ffb5997689f266717675b2
SSDeep
12:5jO/eRiMz7SR58yelvFFxj9660zMbcASArzucM8tRyBMiQPVtBo/PiMztaY/:9O/eRi27SRSZlpj97Osc4ucnMKFo/Pik
TLSH
3EF0235FAB56D850C767D035009A306C6370D382816A5A5BDDFCB9A1409E340AE79D14
3 malicious · 3 files
ZIP64b9c97e362a935472ce0bf8b627055fT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKContrato_Indeniza_Brasil-4Y8C9B.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
arc:zip>lnk~T1059.003~T1202~T1204.002
Shape
arc:zip>lnk
malicious
2 nodes
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential3 malicious · 3 files
ZIP64b9c97e362a935472ce0bf8b627055fT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKContrato_Indeniza_Brasil-4Y8C9B.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
No malware configuration was found at this point.
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
64b9c97e362a935472ce0bf8b627055f › Contrato_Indeniza_Brasil-4Y8C9B.lnk
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with EssentialSign in or create a free account to view the matching YARA rules.
Create a free account