Malicious
7dcbb69a8c02fd8ec9e0c632e68003f1
ZIP Archive
MD5: 7dcbb69a8c02fd8ec9e0c632e68003f1
Size: 633 B
application/zip
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
ZIP archive
Size
633 B · 633 B
First seen
2026-08-03 08:46 · 2 months ago
Last seen
2026-08-03 08:46 · 2 months ago
Last analysis
2026-08-03 08:46 · 2 months ago
Hashes
MD5
7dcbb69a8c02fd8ec9e0c632e68003f1
Sha1
9ea4d887ae247690b3a077e78f9bd072738bfd60
Sha256
438146b651471797275275bd38e120dbb730b02ce34ea8eade1efb49fb9813bc
Sha384
261cf837809b86b52dcbb8b642f1171c0bbf820f3909fc35539878e30045edf4431eeec8af1706eb4423289ba5acdd5c
Sha512
7b776185e7c67ac75465339912467b51588d50d941f1bb6d85106781c0b7f4a5cbc320a956da9ac6bf5b07fba6275d038f327ff0133f1eda19d1e243dcff6247
SSDeep
12:5jTRiMK2Szk3AOEHPJ/X4K58frrA3GIbcOiMFaH:9TRih1o3FORPDQrrCG4cOiv
TLSH
ADF0B71E5886CF42FC2F08B2C00320B8CA50C5E14C1C168E4F7EC6E9F9DAF941A1C302
3 malicious · 3 files
ZIP7dcbb69a8c02fd8ec9e0c632e68003f1T1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKContrato_Indeniza_Brasil-5LP0LX.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
arc:zip>lnk~T1059.003~T1202~T1204.002
Shape
arc:zip>lnk
malicious
2 nodes
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential3 malicious · 3 files
ZIP7dcbb69a8c02fd8ec9e0c632e68003f1T1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKContrato_Indeniza_Brasil-5LP0LX.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
No malware configuration was found at this point.
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
7dcbb69a8c02fd8ec9e0c632e68003f1 › Contrato_Indeniza_Brasil-5LP0LX.lnk
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with EssentialSign in or create a free account to view the matching YARA rules.
Create a free account