Malicious
b20cb575ccc4d0cb1658617b3dc0a627
ZIP Archive
MD5: b20cb575ccc4d0cb1658617b3dc0a627
Size: 637 B
application/zip
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
ZIP archive
Size
637 B · 637 B
First seen
2026-08-03 08:15 · 2 months ago
Last seen
2026-08-03 08:15 · 2 months ago
Last analysis
2026-08-03 08:15 · 2 months ago
Hashes
MD5
b20cb575ccc4d0cb1658617b3dc0a627
Sha1
4b390b916e6efe71676083f5d5f5dfbed17b8ee3
Sha256
a4b824df684549d8be125accc7f5336ad7448bdbcaba3b35ac20880df60f13de
Sha384
5067bce64bace37e360a5ff44a9e15383d37642f903de7f390300a86b0233a1e19e771e683af89cd3ae19c210a278b36
Sha512
4fab526caf24064131ac6b43e351a6f40c7c86b26e9f97d85fcb749c8c945b890d2bfbaaecf76846c884207adc84ed518d9b3a7e33eb811dec626c689a4f971e
SSDeep
12:5jiaRiM2ObwJ4U3cCaVsd17dDJkFiPEX/rqFQ3bc5zBc8TiM2Okia7:9iaRiPOc/cts/dqFic/2Mc5Vc8TiPO6
TLSH
5DF062EA603FE014EC2E513805AF58AC8F9D135C02DB5C59B628E0F089CCF0C50A0244
3 malicious · 3 files
ZIPb20cb575ccc4d0cb1658617b3dc0a627T1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKContrato_Indeniza_Brasil-G3DN4K.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
arc:zip>lnk~T1059.003~T1202~T1204.002
Shape
arc:zip>lnk
malicious
2 nodes
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential3 malicious · 3 files
ZIPb20cb575ccc4d0cb1658617b3dc0a627T1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKContrato_Indeniza_Brasil-G3DN4K.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
No malware configuration was found at this point.
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
b20cb575ccc4d0cb1658617b3dc0a627 › Contrato_Indeniza_Brasil-G3DN4K.lnk
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with EssentialSign in or create a free account to view the matching YARA rules.
Create a free account