Malicious
927349911d92a0a4099955ce8653b078
ZIP Archive
MD5: 927349911d92a0a4099955ce8653b078
Size: 634 B
application/zip
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
ZIP archive
Size
634 B · 634 B
First seen
2026-08-03 08:46 · 2 months ago
Last seen
2026-08-03 08:46 · 2 months ago
Last analysis
2026-08-03 08:46 · 2 months ago
Hashes
MD5
927349911d92a0a4099955ce8653b078
Sha1
7f8e730f7a73af0724c79945b1f70f98f7eb5f34
Sha256
de71806a54e4008d73feb47ce7272178b25e031bce3f686e4a27a35d8cbc662f
Sha384
c46ed7ceec777d94d198a4b0b883256096039668b07dcae3a2d58f11ab4e428d661c6a154c2ffeca726a215130d652e9
Sha512
b2fb35e794ce1c7fa52235614f29cefc43f8e2e0551ba42b9ec4d33c0e5e9f8fdd70555b29669665f7c6901402983cafe9f84f6a813ff4e6566922091a9ba15a
SSDeep
12:5jYZoRiM/IdMucvU68OwJ8+pUXJ9V1lE8HXNO67GKc6ZFiM/PaA:9YZoRitdMucvUtGLlvXZ7hc6ZFie
TLSH
4AF062B9850AF5A4F54766340CEBC9F80C32E324C0A2A8461118297226F47C91F2E206
3 malicious · 3 files
ZIP927349911d92a0a4099955ce8653b078T1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKContrato_Indeniza_Brasil-74N72C.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
arc:zip>lnk~T1059.003~T1202~T1204.002
Shape
arc:zip>lnk
malicious
2 nodes
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential3 malicious · 3 files
ZIP927349911d92a0a4099955ce8653b078T1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKContrato_Indeniza_Brasil-74N72C.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
No malware configuration was found at this point.
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
927349911d92a0a4099955ce8653b078 › Contrato_Indeniza_Brasil-74N72C.lnk
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with EssentialSign in or create a free account to view the matching YARA rules.
Create a free account