Malicious
ca6f7e98c0834c7042ae4d34cf5c76fe
ZIP Archive
MD5: ca6f7e98c0834c7042ae4d34cf5c76fe
Size: 629 B
application/zip
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
ZIP archive
Size
629 B · 629 B
First seen
2026-08-03 08:15 · 2 months ago
Last seen
2026-08-03 08:15 · 2 months ago
Last analysis
2026-08-03 08:15 · 2 months ago
Hashes
MD5
ca6f7e98c0834c7042ae4d34cf5c76fe
Sha1
907f4b2cf71ffeadf91965e57a75b30eddf9e990
Sha256
6059bf0b6e2d936bb93be03add801fcf2db192335439170f6f1b8f45521521de
Sha384
60c679fa1dd5093f3a10a657369305e63e1673bf2488d2b67782d237ada27bd2e2b772852f2b49449fa9eece265644e5
Sha512
4ccbf563f673186b31a61bf59b5db372b08a10986d6e375b030ed90f6433dde5a37ca48d0678d60170c9db8f01d44a73208848f0fe16974596668177b88d8d14
SSDeep
12:5j3eRiMkQcBqnvWQ/7RexXtx79PTQINeR3HanBV2fX4/9grT4xRhz7NPiMBaj:9ORi7Q6qvVQptTPpeR3HyBV2fK9grsxU
TLSH
09F0026E425BA3C2CC76B1B05C5215661EF0B1204C7839670BBBA06A735079D3F9C2DD
3 malicious · 3 files
ZIPca6f7e98c0834c7042ae4d34cf5c76feT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKContrato_Indeniza_Brasil-RAR8FH.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
arc:zip>lnk~T1059.003~T1202~T1204.002
Shape
arc:zip>lnk
malicious
2 nodes
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential3 malicious · 3 files
ZIPca6f7e98c0834c7042ae4d34cf5c76feT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKContrato_Indeniza_Brasil-RAR8FH.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
No malware configuration was found at this point.
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
ca6f7e98c0834c7042ae4d34cf5c76fe › Contrato_Indeniza_Brasil-RAR8FH.lnk
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with EssentialSign in or create a free account to view the matching YARA rules.
Create a free account