Malicious
8a221f2791596f173a678b4c7a317a36
ZIP Archive
MD5: 8a221f2791596f173a678b4c7a317a36
Size: 639 B
application/zip
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
ZIP archive
Size
639 B · 639 B
First seen
2026-08-03 08:31 · 2 months ago
Last seen
2026-08-03 08:31 · 2 months ago
Last analysis
2026-08-03 08:31 · 2 months ago
Hashes
MD5
8a221f2791596f173a678b4c7a317a36
Sha1
a8f056fc8a83a0c172f8f4ac5d184e9554383856
Sha256
5243d759ae1956fbef84cae2da730c1d52cca2aa04ee0b15abd2c059ef26e217
Sha384
22ff10f881b214f218a7bf1ab7b553f1ca0167b183548df3ba6805bac2b615832688615a306ee9025223877ef7afa7fd
Sha512
fd3c3876167469f57280ad923d6bd0d3b4b7c585cf29bde9f336639bdb8e76e833f96bcd1ac3b5d89e291ac787704c9a8a281150ce659ac46d2e1ebfdaf9060e
SSDeep
12:5jTaRiMhL+IAuD5G9C7hWdOhIIpDoW/g1Wy+uYM28PFUmnZTiMhL6aV:9+RiM+ZuZA8xpEWRuDfdUmnFiMj
TLSH
62F002CBF42EC959CA1F703010A91270B43CA250142F8477912907D1857D700DDBCDA4
3 malicious · 3 files
ZIP8a221f2791596f173a678b4c7a317a36T1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKContrato_Indeniza_Brasil-QFW5Q6.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
arc:zip>lnk~T1059.003~T1202~T1204.002
Shape
arc:zip>lnk
malicious
2 nodes
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential3 malicious · 3 files
ZIP8a221f2791596f173a678b4c7a317a36T1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKContrato_Indeniza_Brasil-QFW5Q6.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
No malware configuration was found at this point.
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
8a221f2791596f173a678b4c7a317a36 › Contrato_Indeniza_Brasil-QFW5Q6.lnk
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with EssentialSign in or create a free account to view the matching YARA rules.
Create a free account