Malicious
7ba9420a93a00bab91c2e4ed0105c8ec
ZIP Archive
MD5: 7ba9420a93a00bab91c2e4ed0105c8ec
Size: 976 B
application/zip
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
ZIP archive
Size
976 B · 976 B
First seen
2026-08-03 08:30 · 2 months ago
Last seen
2026-08-03 08:30 · 2 months ago
Last analysis
2026-08-03 08:30 · 2 months ago
Hashes
MD5
7ba9420a93a00bab91c2e4ed0105c8ec
Sha1
f3627543b93693fb947c6dd07b4a5c273da4ff92
Sha256
210e0029a7da5a560d59d25938747f7fa4d26b7510f3f349e66aa3fdde030c27
Sha384
b6d35ffad6f02f9c0362d32234ce19babbe2074a33759dd5c12a197620ce424f680dda864621d3d3c346447df81d692d
Sha512
2db256d87fcbcdddf2acf36b661aa270d0f87ae6be98df248bc5ad7df9c76a46c9602352972f379e60b98f589fcaf2f68c66704f6d9d6501751cf0dfd68217a3
SSDeep
24:9a4RiIY/O1htx3enEuEm4LGMmmIW3BaLEViIf:95R6/OntxuGm4i6IW3ILYN
TLSH
D711CC576C8DC664FD4B30F510EC45D45F7C0222C56F820B907D5267547C9050E8C3F4
3 malicious · 3 files
ZIP7ba9420a93a00bab91c2e4ed0105c8ecT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKContrato_Indeniza_Brasil-QWRP8B.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
arc:zip>lnk~T1059.003~T1202~T1204.002
Shape
arc:zip>lnk
malicious
2 nodes
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential3 malicious · 3 files
ZIP7ba9420a93a00bab91c2e4ed0105c8ecT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKContrato_Indeniza_Brasil-QWRP8B.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
No malware configuration was found at this point.
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
7ba9420a93a00bab91c2e4ed0105c8ec › Contrato_Indeniza_Brasil-QWRP8B.lnk
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with EssentialSign in or create a free account to view the matching YARA rules.
Create a free account