Malicious
64d6463a85dfcb91a99c2331cc547874
ZIP Archive
MD5: 64d6463a85dfcb91a99c2331cc547874
Size: 638 B
application/zip
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
ZIP archive
Size
638 B · 638 B
First seen
2026-08-03 08:30 · 2 months ago
Last seen
2026-08-03 08:30 · 2 months ago
Last analysis
2026-08-03 08:30 · 2 months ago
Hashes
MD5
64d6463a85dfcb91a99c2331cc547874
Sha1
eba3808a933f48f6c5a08d931c97d3f44ef60a10
Sha256
86c276b4de475cc8c6a463c80bc75f8afa048a9ecf311c2c21d40061b92b93dd
Sha384
cfbd6207ed9c0e846b980a1791853f1a41ab884a4e9079ceb5f7f6790113e60dab3e6fdff24ef11950abf1dd65da457d
Sha512
83a396efa93b6c18e463873a74180128609694cb9b2b56dbccf68c0a6d3f69cc6541ca0b66f3a985008eb6e54bb6d2cb578c4487793762b73608c098a3a04a2b
SSDeep
12:5j+RiMNfZMagiUFg+Ei6K5+WkxrbKmGCIhxWkJJtcUp5iMNfca0:9+RiqZMyUW64NrbwQkJYUp5iqU
TLSH
8AF023EB4C6B881DD930237010CD995A8CD6F758863D7D6905B9E9EA5478610C56097C
3 malicious · 3 files
ZIP64d6463a85dfcb91a99c2331cc547874T1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKContrato_Indeniza_Brasil-UQ9CX0.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
arc:zip>lnk~T1059.003~T1202~T1204.002
Shape
arc:zip>lnk
malicious
2 nodes
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential3 malicious · 3 files
ZIP64d6463a85dfcb91a99c2331cc547874T1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKContrato_Indeniza_Brasil-UQ9CX0.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
No malware configuration was found at this point.
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
64d6463a85dfcb91a99c2331cc547874 › Contrato_Indeniza_Brasil-UQ9CX0.lnk
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with EssentialSign in or create a free account to view the matching YARA rules.
Create a free account