Malicious
ZIP Archive
MD5: db1bb5c0b8e1ce42c0884f728891099f
Size: 643 B
application/zip
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
ZIP archive
Size
643 B · 643 B
First seen
2026-08-03 08:15 · 2 months ago
Last seen
2026-08-03 08:15 · 2 months ago
Last analysis
2026-08-03 08:15 · 2 months ago
Hashes
MD5
db1bb5c0b8e1ce42c0884f728891099f
Sha1
675e05f8fdde95a78ce3a2138bec66fab26a291b
Sha256
00d85981ee46cdb677553ef10f064ae8aca9762fd251dda23181493dcb97b29f
Sha384
c275eed701ab82a9d43d2e83100374bc882801119a5af5e544d85b9e1b7cfa5f5b3794f53b42bbe183f5ddaa27c8ebcb
Sha512
b4a14cfdedfc3bb99dcdecfbd35608b06bea1630950daa81f89431e015e8f70e25e167e9e6b0dcccaf18b564da362dfd0e23c17ad410a6b6181cf4e7c945c64f
SSDeep
12:5jTCRiMaiIWVUiWPU9sef1OmOq/zZhS7quQyTwNtjZDq75N3mi94DyqVLiMauaJ:9TCRienmioQ/8mPb3S7NQyMNvqbmi94M
TLSH
3AF0622B821F9121CF5281720441B4A06DA0EBCB40340EFB5274DAE33519B05FB23C2D
3 malicious · 3 files
ZIPdb1bb5c0b8e1ce42c0884f728891099fT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKContrato_Indeniza_Brasil-DA207O.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
arc:zip>lnk~T1059.003~T1202~T1204.002
Shape
arc:zip>lnk
malicious
2 nodes
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential