Malicious
ZIP Archive
MD5: ce433aa1624126f935bf289322cc4eaf
Size: 642 B
application/zip
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
ZIP archive
Size
642 B · 642 B
First seen
2026-08-03 08:46 · 2 months ago
Last seen
2026-08-03 08:46 · 2 months ago
Last analysis
2026-08-03 08:46 · 2 months ago
Hashes
MD5
ce433aa1624126f935bf289322cc4eaf
Sha1
697ae98745b8bb5b15cadf8d70f121bba7e09d2b
Sha256
b123f7a27f49e804d294f084cf0b1574b108bf32c16eb19884d57bfd1c582eef
Sha384
3e0d02d8ead8341cedeb58d5624d7dc80073fb9bba7c46c8cabd5352822013f98049943efa684b0fc1b4a31bf322d289
Sha512
bf77d921d595088581a5e384130551e185905a25c49f16f70e6ca89d52f9d5d986928ca80b30c70bc743e9d39fef1d88ae6af27617f5a504d96096a0dccb08ef
SSDeep
12:5jw/eRiMT+4ROIP5lgOjxgHf3ot3vHN9Ya3Ed6AlAblw/XvG2/PiMT6aY/:9weRi74RHhOOdgHo37Y0wibu/XumPit
TLSH
9EF0236D4308C8A0C714C43116C01FA05CB5B7A14FB98088C67C1C13A598F95527D785
3 malicious · 3 files
ZIPce433aa1624126f935bf289322cc4eafT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKContrato_Indeniza_Brasil-7WKDO0.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
arc:zip>lnk~T1059.003~T1202~T1204.002
Shape
arc:zip>lnk
malicious
2 nodes
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential