Malicious
972d77a5d30f995265bf94ae3b00303b
ZIP Archive
MD5: 972d77a5d30f995265bf94ae3b00303b
Size: 635 B
application/zip
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
ZIP archive
Size
635 B · 635 B
First seen
2026-08-03 08:15 · 2 months ago
Last seen
2026-08-03 08:15 · 2 months ago
Last analysis
2026-08-03 08:15 · 2 months ago
Hashes
MD5
972d77a5d30f995265bf94ae3b00303b
Sha1
55c01fb0a1eea511760d065d99f4199fbf062037
Sha256
4b4a9fe8fd3b6bfe0af90e6badb9867ac1262bcfb95c1a4a8f7ba10840c33f8a
Sha384
0d028365de43e713a690b8942b15d8f03be0bfec631a3874c560700eff050c8fe291c89e1d14966fe429af064bc416f5
Sha512
608c6809aa43754b845a897c575b3fdc090925ba4889fef4a3ec0eec6088250926801883139e1c40d49f35e8e23e885858939b35239f7d3ee56a0e3fcabe645d
SSDeep
12:5jTRiMWTVoeqyNEcu8QFN15dzITuvG8CObIVpp2dsvUjixG1TqiMWTfax:9TRiHjNTuvFN15l+8Cz7ZvUWxKTqiHs
TLSH
A7F0681F4217B262FCCB74F124E65367047291009D350F21095D59D3126DE5807A56D5
3 malicious · 3 files
ZIP972d77a5d30f995265bf94ae3b00303bT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKContrato_Indeniza_Brasil-X0Q6CJ.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
arc:zip>lnk~T1059.003~T1202~T1204.002
Shape
arc:zip>lnk
malicious
2 nodes
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential3 malicious · 3 files
ZIP972d77a5d30f995265bf94ae3b00303bT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKContrato_Indeniza_Brasil-X0Q6CJ.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
No malware configuration was found at this point.
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
972d77a5d30f995265bf94ae3b00303b › Contrato_Indeniza_Brasil-X0Q6CJ.lnk
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with EssentialSign in or create a free account to view the matching YARA rules.
Create a free account