Malicious
e63f4d91a77f5125043de2e07f00f9ea
ZIP Archive
MD5: e63f4d91a77f5125043de2e07f00f9ea
Size: 933 B
application/zip
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
ZIP archive
Size
933 B · 933 B
First seen
2026-08-03 08:30 · 2 months ago
Last seen
2026-08-03 08:30 · 2 months ago
Last analysis
2026-08-03 08:30 · 2 months ago
Hashes
MD5
e63f4d91a77f5125043de2e07f00f9ea
Sha1
df29aa657188c028f40a9b1de78e192212c6eacb
Sha256
408d134132da2a1d1ac2b5f282152d75897b4968bbc7d342829af329f338a2ec
Sha384
c29a04a3d944c45443f2e27e823ae90e3fe5b93dfc964b1874380519b350cae851116fae0ae5e2291c26873080b2272c
Sha512
69daa304b7c9cc52b37d370d39244ec916a023a59f0533fef025f8e0236cda412ddd696941521750527e0cf259f7a741aeb77befe3f0047e6930a3d1e42f919a
SSDeep
24:9FRiePP04cOij8eJKXM4p3JaXNfBHfemK0Sgiu:9FRhP8tSX5p3JaXRBHfemKjgz
TLSH
5B11B77C5384E408CB33C1BE009D4CCC8DA2B2905413472326E4EECAB996362C96424E
3 malicious · 3 files
ZIPe63f4d91a77f5125043de2e07f00f9eaT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKContrato_Indeniza_Brasil-NH61O7.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
arc:zip>lnk~T1059.003~T1202~T1204.002
Shape
arc:zip>lnk
malicious
2 nodes
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential3 malicious · 3 files
ZIPe63f4d91a77f5125043de2e07f00f9eaT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKContrato_Indeniza_Brasil-NH61O7.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
No malware configuration was found at this point.
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
e63f4d91a77f5125043de2e07f00f9ea › Contrato_Indeniza_Brasil-NH61O7.lnk
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with EssentialSign in or create a free account to view the matching YARA rules.
Create a free account