Malicious
d00cc3be57f0718d01321c954e63f2d2
ZIP Archive
MD5: d00cc3be57f0718d01321c954e63f2d2
Size: 628 B
application/zip
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
ZIP archive
Size
628 B · 628 B
First seen
2026-08-03 08:31 · 2 months ago
Last seen
2026-08-03 08:31 · 2 months ago
Last analysis
2026-08-03 08:31 · 2 months ago
Hashes
MD5
d00cc3be57f0718d01321c954e63f2d2
Sha1
7564dcefcf167da0c04faf246efa917ee242492d
Sha256
02446fafa0689bf9aa4cf21fd9616536c2ea2c9ef5d4f5f656eba22f27ef199d
Sha384
45b9a4bac02ac801d55ef9ede4197e8882673f9b5b2da06508fe409d04d38b923d3825abe3aecbb5585e80138e8c36a5
Sha512
b67f4d8a8b54cc5235b1630cf115540da700fe9c6d0a4a93059239fedb954e0cd1b837693b6eab4a96078e00b526c0d0588cbf4858ac8678de6c19a814b91023
SSDeep
12:5jyyRiMOUEvj6UdEmQlNODAawrq1QO8Qg7VJ9hVBLxc3wUBM7iMOU+Jaa:9yyRihUEWUdLwH7raQOwnBU3lBM7ihUa
TLSH
78F02D8C0506A300CE13C138DA9721E98E3ACA1CD93D2C62022CFD9990BFA906F10AC0
3 malicious · 3 files
ZIPd00cc3be57f0718d01321c954e63f2d2T1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKContrato_Indeniza_Brasil-T22G18.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
arc:zip>lnk~T1059.003~T1202~T1204.002
Shape
arc:zip>lnk
malicious
2 nodes
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential3 malicious · 3 files
ZIPd00cc3be57f0718d01321c954e63f2d2T1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKContrato_Indeniza_Brasil-T22G18.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
No malware configuration was found at this point.
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
d00cc3be57f0718d01321c954e63f2d2 › Contrato_Indeniza_Brasil-T22G18.lnk
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with EssentialSign in or create a free account to view the matching YARA rules.
Create a free account