Malicious
b1253b19833928541d70d0b705958a5b
ZIP Archive
MD5: b1253b19833928541d70d0b705958a5b
Size: 626 B
application/zip
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
ZIP archive
Size
626 B · 626 B
First seen
2026-08-03 08:31 · 2 months ago
Last seen
2026-08-03 08:31 · 2 months ago
Last analysis
2026-08-03 08:31 · 2 months ago
Hashes
MD5
b1253b19833928541d70d0b705958a5b
Sha1
22a215e2cdcbe65cb5b51bb33c531afea6da8089
Sha256
d2bb4385d686369f1248ab20f8d83ebbd4639ae096636c3fd8f1ff6e0ef9bf88
Sha384
5f926f78d5ea90ba99342e53c601f80136584a6cf5cb0c7383470328a6bda92e38a8bb0ac589ddfa3776d77b6af9aa67
Sha512
7ce1fbd48fc4f30a03a98bef13c0dd8bc5246a4af6f0d3ef2ea0dcbaf8ec1b96a0a221fc1f34d4a35992eeab1115411a011f9ef8796099b0915889f3269184fe
SSDeep
12:5jzaRiMCCcERR6jIgYTqxYvOOHIy2ojOWhYiceXdrBkB1TiMC6ao:9zaRieTRWI2YLHOW3tkB1TiG
TLSH
AFF0622D310DB90AE9094CF2B8C28C840DF2A109899A8E84E65CA8E220A1B429F7C024
3 malicious · 3 files
ZIPb1253b19833928541d70d0b705958a5bT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKContrato_Indeniza_Brasil-X29LYO.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
arc:zip>lnk~T1059.003~T1202~T1204.002
Shape
arc:zip>lnk
malicious
2 nodes
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential3 malicious · 3 files
ZIPb1253b19833928541d70d0b705958a5bT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKContrato_Indeniza_Brasil-X29LYO.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
No malware configuration was found at this point.
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
b1253b19833928541d70d0b705958a5b › Contrato_Indeniza_Brasil-X29LYO.lnk
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with EssentialSign in or create a free account to view the matching YARA rules.
Create a free account