Malicious
e7dad09f39a0ab2a866648f19d0d519f
ZIP Archive
MD5: e7dad09f39a0ab2a866648f19d0d519f
Size: 637 B
application/zip
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
ZIP archive
Size
637 B · 637 B
First seen
2026-08-03 08:46 · 2 months ago
Last seen
2026-08-03 08:46 · 2 months ago
Last analysis
2026-08-03 08:46 · 2 months ago
Hashes
MD5
e7dad09f39a0ab2a866648f19d0d519f
Sha1
498d87276605afa8fb12e51ce48de132f86dc4c9
Sha256
66927e69310262e25c944c91c360a4f923928634b199bb88a24b4755cc2da16a
Sha384
d455458bee17a4798d123933b400cb064ffce191ebc166e7d0b08d757f743aba453e1eddb7ac494fcf11822fc536912d
Sha512
212c319101c76753cd1fabc18f1a467f7bde3b65650dab1e1a0043ebcc9bb33ca0e001e6d7da3dc34c5f5ea58b5d16174c548b7776b818047cf5b059bb088141
SSDeep
12:5jFRiMf5mB5YViCB9rK23anQYnQFnVegYs7enpggPAmbccVLDgiM/a7:9FRiEiUtK2qnrQaRnOgPAcpfgix
TLSH
C4F068ABE20CD495CA33D83A146D26F54E64E2A001743D9101ADDCBCF1471444FF2AF8
3 malicious · 3 files
ZIPe7dad09f39a0ab2a866648f19d0d519fT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKContrato_Indeniza_Brasil-L071QZ.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
arc:zip>lnk~T1059.003~T1202~T1204.002
Shape
arc:zip>lnk
malicious
2 nodes
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential3 malicious · 3 files
ZIPe7dad09f39a0ab2a866648f19d0d519fT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKContrato_Indeniza_Brasil-L071QZ.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
No malware configuration was found at this point.
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
e7dad09f39a0ab2a866648f19d0d519f › Contrato_Indeniza_Brasil-L071QZ.lnk
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with EssentialSign in or create a free account to view the matching YARA rules.
Create a free account