Malicious
9ae0e9bb8a87632b16f8ba51e6b0dc27
ZIP Archive
MD5: 9ae0e9bb8a87632b16f8ba51e6b0dc27
Size: 883 B
application/zip
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
ZIP archive
Size
883 B · 883 B
First seen
2026-08-03 08:31 · 2 months ago
Last seen
2026-08-03 08:31 · 2 months ago
Last analysis
2026-08-03 08:31 · 2 months ago
Hashes
MD5
9ae0e9bb8a87632b16f8ba51e6b0dc27
Sha1
884f99e86ef956cb90e657527771769702eab59a
Sha256
3238bbe7edbf670b3d12c5258771f85592ed0f27fab62618269a2241b3c70be0
Sha384
04ba0a88537704314fd6db7b01c92f59712830f8c43a3b86472d91c60582dd32211d73e0c2a066bc9d72b1fea1d48cc0
Sha512
ff210e90fea4325138c42aff5c92f4d718c86794cf3e4a62c08db6952512fcfe7bc612cd44d0ab11817cb6f9e631ae6acb9ece1ed9fb672839304f0e4231764c
SSDeep
24:9ARixFJVUX3tOk9GAasEuSN59ThB+dcnPoVtGLXih:9AR4FW3tOnDsSN5LIdsUGX8
TLSH
A2116387898F8053CE6A3471BC585AE12DF917E0D14A6893CA7D2EF31116EF01D2478C
3 malicious · 3 files
ZIP9ae0e9bb8a87632b16f8ba51e6b0dc27T1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKContrato_Indeniza_Brasil-5IN5IL.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
arc:zip>lnk~T1059.003~T1202~T1204.002
Shape
arc:zip>lnk
malicious
2 nodes
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential3 malicious · 3 files
ZIP9ae0e9bb8a87632b16f8ba51e6b0dc27T1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKContrato_Indeniza_Brasil-5IN5IL.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
No malware configuration was found at this point.
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
9ae0e9bb8a87632b16f8ba51e6b0dc27 › Contrato_Indeniza_Brasil-5IN5IL.lnk
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with EssentialSign in or create a free account to view the matching YARA rules.
Create a free account