Malicious
c60490c9abdd21b2efcfcd52ee35bb95
ZIP Archive
MD5: c60490c9abdd21b2efcfcd52ee35bb95
Size: 633 B
application/zip
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
ZIP archive
Size
633 B · 633 B
First seen
2026-08-03 08:15 · 2 months ago
Last seen
2026-08-03 08:15 · 2 months ago
Last analysis
2026-08-03 08:15 · 2 months ago
Hashes
MD5
c60490c9abdd21b2efcfcd52ee35bb95
Sha1
723dcb590fd43bc2433815a937a8aa26d7a4db5d
Sha256
8dbdab4384fe8b8d25824d1aeeb706f7819b9183bfec222e5a4f01ed5d87d42a
Sha384
ecdb933db3bcac03f547dcce4c30865bd3336f9926310680c84eff367fa745458f2b8511b37cbc765a3dd00ad2550e19
Sha512
f5a39c229b8d57821a62dc794ad861166ad67eaa899e7a2854fa9cb3dd82b05207e9ea2fba9576110cce9115d04afb5f420638264eeda643cbd594d753a7439e
SSDeep
12:5jwRiMpScMuEck8ay+R5H3l0lgZ4Y8DQLOwFyyn2bGDKgIJ4OwRueGW6G++kBniI:9wRipcMuEck+S1AgZ58EVp2bGdq4TV+7
TLSH
5EF0B7B9B213E392EE538133C2CB2878C8748280DA062A42D1F3E4BE9199F509CD4384
3 malicious · 3 files
ZIPc60490c9abdd21b2efcfcd52ee35bb95T1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKContrato_Indeniza_Brasil-KMHFQM.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
arc:zip>lnk~T1059.003~T1202~T1204.002
Shape
arc:zip>lnk
malicious
2 nodes
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential3 malicious · 3 files
ZIPc60490c9abdd21b2efcfcd52ee35bb95T1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKContrato_Indeniza_Brasil-KMHFQM.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
No malware configuration was found at this point.
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
c60490c9abdd21b2efcfcd52ee35bb95 › Contrato_Indeniza_Brasil-KMHFQM.lnk
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with EssentialSign in or create a free account to view the matching YARA rules.
Create a free account