Malicious
6e139ee7ef262a477be04ecbd3439f3e
ZIP Archive
MD5: 6e139ee7ef262a477be04ecbd3439f3e
Size: 640 B
application/zip
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
ZIP archive
Size
640 B · 640 B
First seen
2026-08-03 08:15 · 2 months ago
Last seen
2026-08-03 08:15 · 2 months ago
Last analysis
2026-08-03 08:15 · 2 months ago
Hashes
MD5
6e139ee7ef262a477be04ecbd3439f3e
Sha1
3d64a36a5383a28a82f7bbf91ed5ca61f7457ba8
Sha256
0b285184c2030537a32f77b53fee071a7c1acde0064544e3a96a5f9355f5ac50
Sha384
a32da82df5651a33baf16b53e00d7528aabfb13d07dcab2021afe871b48c9dafd525e515cbc2bc68be90ad9a794e0fce
Sha512
a3adabdbad57eefe881985ce938e6017022919e034e689fc6c46aa65f635bd86c7f02b8b1ee66064562fcc4b987a4e7b2f6ed6f7af4c84c744dddbb19df3fd70
SSDeep
12:5j1eRiM1xdSY//Y7Mg5q3khJXZn/S67zT2OlEImt7Y3M2/G0V36SSs3PiM1xPaW:91eRiaxdSUY5syJJnq67G9YcKG0V36h0
TLSH
6CF0621B8B0561C0CC32C8BAC0483C201EBCE9E08CB16CB0478508C6E7D8F6B4D38AB6
3 malicious · 3 files
ZIP6e139ee7ef262a477be04ecbd3439f3eT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKContrato_Indeniza_Brasil-MIR0PQ.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
arc:zip>lnk~T1059.003~T1202~T1204.002
Shape
arc:zip>lnk
malicious
2 nodes
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential3 malicious · 3 files
ZIP6e139ee7ef262a477be04ecbd3439f3eT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKContrato_Indeniza_Brasil-MIR0PQ.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
No malware configuration was found at this point.
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
6e139ee7ef262a477be04ecbd3439f3e › Contrato_Indeniza_Brasil-MIR0PQ.lnk
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with EssentialSign in or create a free account to view the matching YARA rules.
Create a free account