Malicious
ef0f595c4b9c3807d5a4f40d31ccfda3
ZIP Archive
MD5: ef0f595c4b9c3807d5a4f40d31ccfda3
Size: 637 B
application/zip
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
ZIP archive
Size
637 B · 637 B
First seen
2026-08-03 08:31 · 2 months ago
Last seen
2026-08-03 08:31 · 2 months ago
Last analysis
2026-08-03 08:31 · 2 months ago
Hashes
MD5
ef0f595c4b9c3807d5a4f40d31ccfda3
Sha1
a002223d71c9133b79ec0d86904f30f14ee0d466
Sha256
a3ac795e5da5d7b3231f744655cc7ce1a2f36e552159beac5f0959ed9355c882
Sha384
06d1428547db3d0cca4b317238b14ff59c485dd7ada7a816e06d0a371c1963b20da3edfe3923508a968215887bc81788
Sha512
f211c30d807c6d6eca5a8167cfb3e195597138fd9c013e6215280274fd9908e0b5b1be17c728569f52b605217f368c60a9cbb035cf11726566d9bf76eacce049
SSDeep
12:5j1c2DTRiMxzNL07IU5DQ2HH9m8YkNDYG3BAPKIJ5m+fPnAudL/c2D8iMxzNL014:91c2PRiEitq2n9m8YktfBAPD5DfPnxJq
TLSH
16F008DF931D653DD0274030205F6E7494BC1574012F8CD1167AD5D249E4B1D1F5F756
3 malicious · 3 files
ZIPef0f595c4b9c3807d5a4f40d31ccfda3T1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKContrato_Indeniza_Brasil-UADV4N.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
arc:zip>lnk~T1059.003~T1202~T1204.002
Shape
arc:zip>lnk
malicious
2 nodes
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential3 malicious · 3 files
ZIPef0f595c4b9c3807d5a4f40d31ccfda3T1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKContrato_Indeniza_Brasil-UADV4N.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
No malware configuration was found at this point.
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
ef0f595c4b9c3807d5a4f40d31ccfda3 › Contrato_Indeniza_Brasil-UADV4N.lnk
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with EssentialSign in or create a free account to view the matching YARA rules.
Create a free account