Malicious
e0669d60fdfca18c8b8a7ff1386db055
ZIP Archive
MD5: e0669d60fdfca18c8b8a7ff1386db055
Size: 627 B
application/zip
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
ZIP archive
Size
627 B · 627 B
First seen
2026-08-03 08:46 · 2 months ago
Last seen
2026-08-03 08:46 · 2 months ago
Last analysis
2026-08-03 08:46 · 2 months ago
Hashes
MD5
e0669d60fdfca18c8b8a7ff1386db055
Sha1
5e75bf2b6b215c93dc4f9e0c42f5cba2fc682fa3
Sha256
15b780eea216692d56f27c68d031fc2332eb0dc00ac461716d92eb0c09567bf5
Sha384
ee94d3e4ed5ad4af875bf56cffe9cc7d4b60f09fc9ce2af916209342326753bd0e485a84b19ec788410b4f2b2eb90794
Sha512
d892cdef841ba9572faf9589e95a650f757fc4227979897e4ea2b9fc84787528acdf6dd53634d9c90dfe1d3b95a4121fe7ef5369140b677a75696e4b04bfa2fb
SSDeep
12:5jxRiMDmjchOIdg2cQxVhGxOOzO51EuqZLQbfdlV6YrunYmYiMDuaZ:9xRiymjSOg/cyS1z1uoLQrXV6CunTYiw
TLSH
7AF0626E8A0DCC0DC80EDCB012D021B096213310D038177092B87EE5C291692028AC84
3 malicious · 3 files
ZIPe0669d60fdfca18c8b8a7ff1386db055T1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKContrato_Indeniza_Brasil-S5EGTB.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
arc:zip>lnk~T1059.003~T1202~T1204.002
Shape
arc:zip>lnk
malicious
2 nodes
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential3 malicious · 3 files
ZIPe0669d60fdfca18c8b8a7ff1386db055T1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKContrato_Indeniza_Brasil-S5EGTB.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
No malware configuration was found at this point.
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
e0669d60fdfca18c8b8a7ff1386db055 › Contrato_Indeniza_Brasil-S5EGTB.lnk
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with EssentialSign in or create a free account to view the matching YARA rules.
Create a free account