Malicious ZIP Archive (LOLBin) analysis – 44ab4d394623

Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

Unlock with Essential

File

Type

ZIP archive

Size

1.57 KB · 1,570 B

First seen

2026-08-03 07:00 · 2 months ago

Last seen

2026-08-03 07:00 · 2 months ago

Last analysis

2026-08-03 07:01 · 2 months ago

Hashes

MD5 062c66bbd1fa5bd0e085a85e185a58bd Sha1 44349e6c217522951cdcf88fbefd0a02b53cc754 Sha256 44ab4d3946237c4af43adfe4aeb7bc1a486d901a4255868fc4eb8eba8f54c4ac Sha384 fcf2f3406ee6a26c5192e66adde5897475c1d1f742f64cd9f128c05f5fea360a527e26f5c51ce2b5c14dafc5555ec0ec Sha512 b4a4266c2608db24f0c8985b294b3d707161aa62573ad5f15219fa3e4c898b8b10022389a51350c84014bb6af910f3550467ad10b0693025eae424347e144c6e SSDeep 48:9cI8Tl0Li8B76Gf4HTXJTVLvDivFL03vV:u/0OECJhroMV TLSH E131F99689D49571F55781385360D5600E3915740E2CB0AB8FC58C5678332CA6B5A625

6 malicious · 8 files

ZIP062c66bbd1fa5bd0e085a85e185a58bdLOLBin

LNKphotov_774815578701.lnkLOLBin

SHLNK CommandLine

PS1[PowerShell Command]

PS1[Deobfuscated PS]

BIN[Lnk Summary]

LNKvideoa_240477085131.mp4

STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.

Path arc:zip>lnk~T1059.001~T1059.003~T1202~T1204.002>lnk:cmd>scr:ps1~T1027~T1059.001

Shape arc:zip>lnk>lnk:cmd>scr:ps1

malicious 4 nodes

Path arc:zip>lnk

Shape arc:zip>lnk

2 nodes

LNK: Command Execution UNKNWOWNmalicious

%COMSPhuhuhuhuhuhuhuhuhuhuhu

Deobfuscated PowerShell UNKNWOWNmalicious

$sn2f0huhuhuhuhuhuhuhuhuhuhu

Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.

Unlock with Essential