Malicious
ZIP Archive
MD5: faf6397e5b615a41f081c87fd7e453d2
Size: 940 B
application/zip
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
ZIP archive
Size
940 B · 940 B
First seen
2026-08-03 08:15 · 2 months ago
Last seen
2026-08-03 08:15 · 2 months ago
Last analysis
2026-08-03 08:15 · 2 months ago
Hashes
MD5
faf6397e5b615a41f081c87fd7e453d2
Sha1
bd6638729b803e175e90b9068b511f79a3618679
Sha256
598b6d25452cc4651b2636048e419d376bbdd0e8a9da266badddd73981b02a64
Sha384
bed0949b8bc1a8d21111ad90f4c067292ee68b390389966ef4edf1aa1d239a838847932e73852e09f913416e99eb4697
Sha512
f944c86b2fbcb5b7b72301dfe02f14ef45766a872c08b6a8f4edf027f63fbf8ca989ed5b67cdca1c43409551b03e7dd6fbb2db6575f57df34202ad2b5996dae8
SSDeep
12:5j/RiMaQYMj3n8cd//LNa2aonhoBCkOgbOsgUVM6h02peTjJEiRtoG+L6XaiMOiq:9/Rifw8cNLNPnOst99ZPoG+LaaiRJ
TLSH
B31184E5D239E4DDCCA6C134604330C56160EA0E19CCFAF69AD1625DAFBED6B3426388
3 malicious · 3 files
ZIPfaf6397e5b615a41f081c87fd7e453d2T1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKContrato_Indeniza_Brasil-IY6AU1.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
arc:zip>lnk~T1059.003~T1202~T1204.002
Shape
arc:zip>lnk
malicious
2 nodes
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential