Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
File
Type
ZIP archive
Size
2.73 KB · 2,734 B
First seen
2026-07-25 10:51 · 3 months ago
Last seen
2026-07-25 10:51 · 3 months ago
Last analysis
2026-07-25 18:48 · 3 months ago
Hashes
MD5 0d5d6f8df4ae57d92bf4dd4971620920 Sha1 2eb514bde1859e7543e8a1f02acf6a2f75f125aa Sha256 9340d9c33d5a96602e2270e3892a3b03ffb908879acbdec69c50421990d11d93 Sha384 6e1eb6ca9bc53c01912ff8d1c71b5859d5f905483505aef2a423c843028f0340150e75f94a996d58b7729301030eefd7 Sha512 a39aa1f8f3baf6b796f02642fb92d059a5a08aed0afc738d7af7a0f91366f87576a9d6127d92f5b874e9ba4dc96b6536dc47d270d9117706db70109fe4e593e7 SSDeep 48:97Y9DnuZ9EoG4hdem2/002W2vV1/AWsD9MwE5jX:YDuEb+E/M1/A0T TLSH 5D512EB40C977462C7E387F7B1974E88563828531DD91505E35EA1485DD57A773033F4
3 malicious · 4 files
ZIP0d5d6f8df4ae57d92bf4dd4971620920LOLBin
MP4VID_20260725_025304.mp4
LNKIMG_20260724_224151.jpg.lnkLOLBin
SHLNK CommandLine
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

Structural branches: 2 STICH kept: 1secondary ignored: 1
bin 1

Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
Path arc:zip>lnk~T1059.001~T1059.003~T1202~T1204.002>lnk:cmd
Shape arc:zip>lnk>lnk:cmd
malicious 3 nodes
LNK: Command Execution UNKNWOWNmalicious
powershuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential
3 malicious · 4 files
ZIP0d5d6f8df4ae57d92bf4dd4971620920LOLBin
MP4VID_20260725_025304.mp4
LNKIMG_20260724_224151.jpg.lnkLOLBin
SHLNK CommandLine
No malware configuration was found at this point.
LNK: Command Execution UNKNWOWNmalicious
powershuhuhuhuhuhuhuhuhuhuhu
0d5d6f8df4ae57d92bf4dd4971620920 › IMG_20260724_224151.jpg.lnk
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential
Sign in or create a free account to view the matching YARA rules. Create a free account
An error has occurred. This application may no longer respond until reloaded. Reload 🗙