Malicious ZIP Archive (LOLBin) analysis – 191f90d68850

Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

Unlock with Essential

File

Type

ZIP archive

Size

3.88 KB · 3,879 B

First seen

2026-07-25 10:31 · 3 months ago

Last seen

2026-07-25 10:31 · 3 months ago

Last analysis

2026-07-25 18:47 · 3 months ago

Hashes

MD5 02246176ad08971e6246af379b8602b0 Sha1 574086ecd76deee633db9d2ac7f3d977f88f4bd2 Sha256 191f90d68850b555674e64465b3eb75626757d00b769b047b0fab427561c1bc0 Sha384 1e61a9e66217e9fb521744dd5961882dcc2e8b8bba0c606ea3e6bd3c020026a6493f0ead245ca9f43ab3099074786fb3 Sha512 9d346b8604e50474d3832046654ad6136240fe3b6b8e607c0fb0b24d2ca634b42ce530632d4250dc344a8149bcc7e2d9fd5b3c28c0416e5e785223bd62b8c0ed SSDeep 96:i/vw73k82Q3WAmER8kpt8Y80hBpdewXMMwA374OP0zh+:iHGb2Q35mE7tThBXevMwM74dQ TLSH BB814B68829F3935E19733BAF8A5A7435A5CC86784940765338451ADBB656313A03C2E

3 malicious · 4 files

ZIP02246176ad08971e6246af379b8602b0LOLBin

MP4VID_20260725_024508.mp4

LNKIMG_20260724_104406.jpg.lnkLOLBin

SHLNK CommandLine

STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

Structural branches: 2 STICH kept: 1secondary ignored: 1

bin 1

Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.

Path arc:zip>lnk~T1059.001~T1059.003~T1202~T1204.002>lnk:cmd

Shape arc:zip>lnk>lnk:cmd

malicious 3 nodes

LNK: Command Execution UNKNWOWNmalicious

powershuhuhuhuhuhuhuhuhuhuhu

Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.

Unlock with Essential