Malicious
0e56bf981da43ccc3ec1ff984282f937
ZIP Archive
MD5: 0e56bf981da43ccc3ec1ff984282f937
Size: 17.4 KB
application/zip
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
ZIP archive
Size
17.4 KB · 17,403 B
First seen
2026-07-25 10:34 · 3 months ago
Last seen
2026-07-25 10:34 · 3 months ago
Last analysis
2026-07-25 18:50 · 3 months ago
Hashes
MD5
0e56bf981da43ccc3ec1ff984282f937
Sha1
0bfd328ff4b31af6e318c1aac7facfd3315c5a34
Sha256
a38aa47ef6eeb68614d110306492e90259f854e8b22e1fae16c680b961fc85e0
Sha384
c73415e4eb7da456518a56317eb3376f5631082b6c6d2dcf5a8ae01b887c89b44279fb34c9701d2bf6926bd8d1839d23
Sha512
7633a0f00e9f11a5a9919da269428738860e57591bb6a10708717b41803da843212cd5e0a612d0944bd050dfd7f61fdb88192f27c6bbb7fc8b882f9ec1ffe108
SSDeep
384:a4p2q8YvqG3lvDAEWgbgfH0829A6WMa8v8+F5H3gWussq:jqGlvv2082+6fO2
TLSH
0F72D07004669D47D2F78AE03FBA090EAB6B0E407C879668D452B5B50E97637D397B10
3 malicious · 4 files
ZIP0e56bf981da43ccc3ec1ff984282f937T1059.001 · T1059.003 · T1204.002LOLBin
MP4VID_20260724_181500.mp4
LNKIMG_20260725_041241.jpg.lnkT1059.001 · T1059.003 · T1204.002LOLBin
SHLNK CommandLine
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
Structural branches: 2
STICH kept: 1secondary ignored: 1
bin
1Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
arc:zip>lnk~T1059.001~T1059.003~T1202~T1204.002>lnk:cmd
Shape
arc:zip>lnk>lnk:cmd
malicious
3 nodes
LNK: Command Execution
UNKNWOWNmalicious
powershuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential3 malicious · 4 files
ZIP0e56bf981da43ccc3ec1ff984282f937T1059.001 · T1059.003 · T1204.002LOLBin
MP4VID_20260724_181500.mp4
LNKIMG_20260725_041241.jpg.lnkT1059.001 · T1059.003 · T1204.002LOLBin
SHLNK CommandLine
No malware configuration was found at this point.
LNK: Command Execution
UNKNWOWNmalicious
powershuhuhuhuhuhuhuhuhuhuhu
0e56bf981da43ccc3ec1ff984282f937 › IMG_20260725_041241.jpg.lnk
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with EssentialSign in or create a free account to view the matching YARA rules.
Create a free account