Malicious
af5a2fec35969a624ce151ce373016c6
ZIP Archive
MD5: af5a2fec35969a624ce151ce373016c6
Size: 642 B
application/zip
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
ZIP archive
Size
642 B · 642 B
Hashes
MD5
af5a2fec35969a624ce151ce373016c6
Sha1
bbaccaccfee48fb3a2de9476c6329c142ada3034
Sha256
b66978e2afb2c14782eb5dc9982d6969ca2de8e10896530bc7aa757c5fc33ac7
Sha384
4f1430ab999dd07fcd8289b5df38520a30b653a84e119c1f1192d7e9c3758b49eebaf02f7ca189388278ca88d7f8f941
Sha512
4febd8317294404b319bc247f6c9e6b6c7e0d3d93e72c3cd0771e9a0fdc657dfd6aa2670d964ac3c08b6ac78b8e8f86e6683ba59230add0a1822261c8f6fd831
SSDeep
12:5jm/eRiMVfGD55iMtr6Gyd+0ZMdI15zBaerMiuy6VEGutBD2Zhhbnh2E/PiMVQaY:9WeRiAfGd5iKr6GdIui9RVtB4XrYkPiB
TLSH
CFF0231B50EA8453DF07C870951A299044F8D8C688B3D447A01DDCA38E39B116250F94
3 malicious · 3 files
ZIPaf5a2fec35969a624ce151ce373016c6T1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKContrato_Indeniza_Brasil-GJSFVD.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
arc:zip>lnk~T1059.003~T1202~T1204.002
Shape
arc:zip>lnk
malicious
2 nodes
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential3 malicious · 3 files
ZIPaf5a2fec35969a624ce151ce373016c6T1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKContrato_Indeniza_Brasil-GJSFVD.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
No malware configuration was found at this point.
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
af5a2fec35969a624ce151ce373016c6 › Contrato_Indeniza_Brasil-GJSFVD.lnk
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with EssentialSign in or create a free account to view the matching YARA rules.
Create a free account