Malicious ZIP Archive (LOLBin) analysis – 48f4ee8fa7d0

Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

Unlock with Essential

File

Type

ZIP archive

Size

3.37 KB · 3,373 B

First seen

2026-07-25 10:31 · 3 months ago

Last seen

2026-07-25 10:31 · 3 months ago

Last analysis

2026-07-26 04:58 · 3 months ago

Hashes

MD5 075f83dda5352885f402ed442f62d32e Sha1 8d63f8919091a3780fba294361226971f7f5cc1b Sha256 48f4ee8fa7d00c296a5f6af9e12fdbed375f4851c1792937de0f06c84f79f4c1 Sha384 7cbe61a34a8a94c797d6387fc2b4d1850b04643d4ce21e4cbde65bbe9aa910e6f9f40e942c875a82a4371ab709bb653a Sha512 f76065e7bf74955c7dbedb4946539e7ea0e4495cad19ad1b3a4bc6071ea77cf7933bff5f9fc1e90f47aebc72a29ac67b353df2119cc45413b3d2333bdaab8557 SSDeep 96:feZCkSGrZOJrCZMPAo9e/xxwTSEZ8pQbQGbOV1uZlL:feZfSGrMJbLlZjbX++lL TLSH 25617C354083B727C9D377F030872AD92A3824A85D19239EA27E11A8177211773F33AE

3 malicious · 4 files

ZIP075f83dda5352885f402ed442f62d32eLOLBin

MP4VID_20260724_114826.mp4

LNKIMG_20260725_014512.jpg.lnkLOLBin

SHLNK CommandLine

STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

Structural branches: 2 STICH kept: 1secondary ignored: 1

bin 1

Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.

Path arc:zip>lnk~T1059.001~T1059.003~T1202~T1204.002>lnk:cmd

Shape arc:zip>lnk>lnk:cmd

malicious 3 nodes

LNK: Command Execution UNKNWOWNmalicious

powershuhuhuhuhuhuhuhuhuhuhu

Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.

Unlock with Essential