Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
File
Type
ZIP archive
Size
3.38 KB · 3,375 B
First seen
2026-07-29 06:47 · 3 months ago
Last seen
2026-07-29 06:47 · 3 months ago
Last analysis
2026-07-29 06:47 · 3 months ago
Hashes
MD5 07f74b1ca50336d6e9e47c05206a96a1 Sha1 389beb6719ddf92ad8208267d8d49ed874295ced Sha256 3d126d71cbf749f967a86a66af45d58e5a28ddafce98a8296c488ef1eccd8b4d Sha384 c48729e9739dd778fce1be0c2e7f07531608c2bde0e2285daa02bd5802fd1400d14373986cdc417e72adeb03a783a24d Sha512 dfeeecda98bd8b013d492bf53d4f14e4326ff9482f79d1cbd7a66eff09382603fc599d170e6a2ad7c3bb8bcdec1c0e8b0446be84c759b4d2ecdc52e4ecd70c8f SSDeep 96:sbsG5mB9noY+wInG2Th/6NxJ0Z+N3VIdNbqF5:v8HxTx6Nz0l5qD TLSH F5617C1079FA6050F75FB3A073CBDAC9301690AB91468BA8BC8409DE3CBF2523C90900
3 malicious · 4 files
ZIP07f74b1ca50336d6e9e47c05206a96a1LOLBin
MP4VID_20260728_201253.mp4
LNKIMG_20260729_031525.jpg.lnkLOLBin
SHLNK CommandLine
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

Structural branches: 2 STICH kept: 1secondary ignored: 1
bin 1

Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
Path arc:zip>lnk~T1059.001~T1059.003~T1202~T1204.002>lnk:cmd
Shape arc:zip>lnk>lnk:cmd
malicious 3 nodes
LNK: Command Execution UNKNWOWNmalicious
powershuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential
3 malicious · 4 files
ZIP07f74b1ca50336d6e9e47c05206a96a1LOLBin
MP4VID_20260728_201253.mp4
LNKIMG_20260729_031525.jpg.lnkLOLBin
SHLNK CommandLine
No malware configuration was found at this point.
LNK: Command Execution UNKNWOWNmalicious
powershuhuhuhuhuhuhuhuhuhuhu
07f74b1ca50336d6e9e47c05206a96a1 › IMG_20260729_031525.jpg.lnk
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential
Sign in or create a free account to view the matching YARA rules. Create a free account
An error has occurred. This application may no longer respond until reloaded. Reload 🗙