Malicious
e211bce87d6f1dd403a6c05a265f2cb5
ZIP Archive
MD5: e211bce87d6f1dd403a6c05a265f2cb5
Size: 641 B
application/zip
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
ZIP archive
Size
641 B · 641 B
First seen
2026-08-03 08:30 · 2 months ago
Last seen
2026-08-03 08:30 · 2 months ago
Last analysis
2026-08-03 08:30 · 2 months ago
Hashes
MD5
e211bce87d6f1dd403a6c05a265f2cb5
Sha1
cb4d93580c73b45e3217494774984cfabe41708c
Sha256
38e68f22196fe590fa89f5ef516354439565fe3a5698d0267d46689ed3e4e862
Sha384
cd03881efbf3f2522895cfe6705f99795c093ed74bc51131f6d85e3a00d0e564515dc1b3a3920fd6112b49d8c766862e
Sha512
7a6c3dd158c76a468ebfdab55650b949e9107fb868777530355e2aa03810cb99f169319efa3d18165b69b2f609cefc231b6c2deb75a81f49d722d0e852c7154a
SSDeep
12:5j9abeRiMToQ3JJCb28HNMMNrM/vKiz9kwKoP/zklidLSsTBTabPiMT8iaf:9kbeRiF6JAiENMMNrivKiz7/zZfFObPo
TLSH
18F0683FC131C040D3D751305CA931E669A4627BBFBB0CF1C5B8B5AEA5927350596240
3 malicious · 3 files
ZIPe211bce87d6f1dd403a6c05a265f2cb5T1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKContrato_Indeniza_Brasil-60AVWK.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
arc:zip>lnk~T1059.003~T1202~T1204.002
Shape
arc:zip>lnk
malicious
2 nodes
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential3 malicious · 3 files
ZIPe211bce87d6f1dd403a6c05a265f2cb5T1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKContrato_Indeniza_Brasil-60AVWK.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
No malware configuration was found at this point.
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
e211bce87d6f1dd403a6c05a265f2cb5 › Contrato_Indeniza_Brasil-60AVWK.lnk
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with EssentialSign in or create a free account to view the matching YARA rules.
Create a free account