Malicious
6e57956b863a130f2db6963df0c9748f
ZIP Archive
MD5: 6e57956b863a130f2db6963df0c9748f
Size: 643 B
application/zip
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
ZIP archive
Size
643 B · 643 B
First seen
2026-08-03 08:31 · 2 months ago
Last seen
2026-08-03 08:31 · 2 months ago
Last analysis
2026-08-03 08:31 · 2 months ago
Hashes
MD5
6e57956b863a130f2db6963df0c9748f
Sha1
5dfee6aab699a33137d134dc9306783c23cb47d9
Sha256
c2230bbad697cc481672b93a301ae682199c27d352673c5182728c57d8c4a941
Sha384
498825337cdf8994e9885a4e785f5501281cf69d4a0685d3fcb878cba1e7f3953553ba09075ec7997514515ba8960a57
Sha512
f72ae7e4b1dfdacedc857ae4f2ab67bcee5645d006fe034663debbc4d61d358e67c929852e413d3b8c92878aa8e252ff879f434143411424a8df723b881e4999
SSDeep
12:5jwRiMfMSTZmHP4suNcN0TeFjHJHDakxSHp2362ct5eF7iMKaJ:9wRi8MSTZmA980CFrJex237ct5eF7ik
TLSH
F6F06828CB00D1B1FCDF757224D73CB01073449440F7468E95F8D490511EF68CD24D11
3 malicious · 3 files
ZIP6e57956b863a130f2db6963df0c9748fT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKContrato_Indeniza_Brasil-Q89PYQ.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
arc:zip>lnk~T1059.003~T1202~T1204.002
Shape
arc:zip>lnk
malicious
2 nodes
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential3 malicious · 3 files
ZIP6e57956b863a130f2db6963df0c9748fT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKContrato_Indeniza_Brasil-Q89PYQ.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
No malware configuration was found at this point.
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
6e57956b863a130f2db6963df0c9748f › Contrato_Indeniza_Brasil-Q89PYQ.lnk
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with EssentialSign in or create a free account to view the matching YARA rules.
Create a free account