Malicious
ZIP Archive
MD5: 8c186140979b829acc77fddc71f90ad9
Size: 639 B
application/zip
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
ZIP archive
Size
639 B · 639 B
First seen
2026-08-03 08:32 · 2 months ago
Last seen
2026-08-03 08:32 · 2 months ago
Last analysis
2026-08-03 08:32 · 2 months ago
Hashes
MD5
8c186140979b829acc77fddc71f90ad9
Sha1
f714d4802c64aa1b8c4c8644a350acf97f281f8e
Sha256
feb486077b9a95787396112e7b2d7f9cea6f466974919ce3623d239499e040c5
Sha384
7c66fae9659ae9d6870df4baa1adc96583454ffcb8d7a8c875538ede74cca3010a48fc7af68f6a9d6d026da24781b216
Sha512
995cb5f569f6b90b94f5dd16af0c0156222e596c759ab826922d7cd5125bbf11de5a99714dd977cd425987a35ad75964480286ce3fbcbb40c719a18de4b6aa4f
SSDeep
12:5jpRiMLBTlpnPI07H0UzrjcffaIjklbYfRxZ9Tewk1INVdkKQSsQiMLYaV:9pRimBJpP37HxrCfRjOY5fo1IPdZHsQb
TLSH
98F008CE532EF881DF25987391036CB9458592205774844051AB77536998E635D71AFC
3 malicious · 3 files
ZIP8c186140979b829acc77fddc71f90ad9T1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKContrato_Indeniza_Brasil-UXIPMO.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
arc:zip>lnk~T1059.003~T1202~T1204.002
Shape
arc:zip>lnk
malicious
2 nodes
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential