Malicious
66255bcee0c69f9f347ccffcd01a4a73
ZIP Archive
MD5: 66255bcee0c69f9f347ccffcd01a4a73
Size: 640 B
application/zip
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
ZIP archive
Size
640 B · 640 B
First seen
2026-08-03 08:15 · 2 months ago
Last seen
2026-08-03 08:15 · 2 months ago
Last analysis
2026-08-03 08:15 · 2 months ago
Hashes
MD5
66255bcee0c69f9f347ccffcd01a4a73
Sha1
2c51fd2999338346e9cbe0327e32d05a532a90ff
Sha256
ec403dea15440409ff59923e062845a0eb53c033b14fcbd0ecc5e3bd342972dc
Sha384
c973d963c0b40bc433307be1e92b051e56063bb60ddefca8a4e62aa3cc453450e00b83170d4c2fddd540851b53fa45b8
Sha512
2303539ad5df30b66e2f954611532e98b3196f180bdb9e6720b00969e39b1fbb3580e4bb2b1bc075b1f944ebd41bd3ff282f31d69f0ad5f62e9e0f1871a8d20e
SSDeep
12:5j8URiMPYHa5flFgW2zKXFyF5+pirM45JqH+Tg2z86dKS5iMPbiaW:9vRiBaHFgWNXQYH+tXK+iv
TLSH
6AF02D0EC010578CE437C033A992A9A24A20E8A055F4DBAB80E0A1272098F7009986B8
3 malicious · 3 files
ZIP66255bcee0c69f9f347ccffcd01a4a73T1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKContrato_Indeniza_Brasil-RE1R5W.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
arc:zip>lnk~T1059.003~T1202~T1204.002
Shape
arc:zip>lnk
malicious
2 nodes
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential3 malicious · 3 files
ZIP66255bcee0c69f9f347ccffcd01a4a73T1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKContrato_Indeniza_Brasil-RE1R5W.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
No malware configuration was found at this point.
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
66255bcee0c69f9f347ccffcd01a4a73 › Contrato_Indeniza_Brasil-RE1R5W.lnk
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with EssentialSign in or create a free account to view the matching YARA rules.
Create a free account