Malicious
9ec565798df5abf5b5e4a2b1199cdc69
ZIP Archive
MD5: 9ec565798df5abf5b5e4a2b1199cdc69
Size: 629 B
application/zip
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
ZIP archive
Size
629 B · 629 B
First seen
2026-08-03 08:46 · 2 months ago
Last seen
2026-08-03 08:46 · 2 months ago
Last analysis
2026-08-03 08:46 · 2 months ago
Hashes
MD5
9ec565798df5abf5b5e4a2b1199cdc69
Sha1
65f562c44bd1e7971b2fd7062dca47902c1359ff
Sha256
773560d355c0425c47163e6ab4cbb7382dae6d54294ae77cd9f059c3bf86045b
Sha384
1cad245c18571101ed849ee1acefced71b390689e82324bbc90093889611d7854b58836d7180352f31c3fa421ab5893f
Sha512
2823d541dd4e4090ac0a18571ec61101e82092d599b9ee182306b82bcdab13937037c70d32244010032d123b400997a786acc7aa302b030219d9d4bf112bc3a6
SSDeep
12:5j14RiM4FUaYqSpsKItDMJJbh8EQcPkGMOznJUO977ViMDaj:914RixF6qa1IwJbhfP1n+O97Vi5
TLSH
77F06266137BE099D609A6BE07C3683140DC9C5286F30E13C0388E8CD068F5509686E8
3 malicious · 3 files
ZIP9ec565798df5abf5b5e4a2b1199cdc69T1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKContrato_Indeniza_Brasil-99RF7Z.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
arc:zip>lnk~T1059.003~T1202~T1204.002
Shape
arc:zip>lnk
malicious
2 nodes
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential3 malicious · 3 files
ZIP9ec565798df5abf5b5e4a2b1199cdc69T1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKContrato_Indeniza_Brasil-99RF7Z.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
No malware configuration was found at this point.
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
9ec565798df5abf5b5e4a2b1199cdc69 › Contrato_Indeniza_Brasil-99RF7Z.lnk
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with EssentialSign in or create a free account to view the matching YARA rules.
Create a free account