Malicious
121298528af04c49d69b0ddd8cd69e14
ZIP Archive
MD5: 121298528af04c49d69b0ddd8cd69e14
Size: 10.88 KB
application/zip
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
ZIP archive
Size
10.88 KB · 10,883 B
First seen
2026-07-29 06:46 · 3 months ago
Last seen
2026-07-29 06:46 · 3 months ago
Last analysis
2026-07-29 06:46 · 3 months ago
Hashes
MD5
121298528af04c49d69b0ddd8cd69e14
Sha1
36d976a90eb6893b70af57afde8c89fe6a038d64
Sha256
81badb260741342daf5686ef603ca20bd28ac968588df0f482630200ec627f90
Sha384
4c8e4b9d4a4be2a0a8adebd84fcdeb1669e975421bd8fdcbd996574a3893dcfba173c70011564373660d46119b957114
Sha512
5aaa5c3d329fd4bd682d6fb89039c681d62522011bceef09ecba4483ee9b3a8284f34f458bcc5dd3ddaafdaadf0f0a5d55a4d9370a3ee2c8355657fb949c6697
SSDeep
192:2DU3wwA/ABDm5h+0rA0Q0lEEmr/vanM3ZBUtsHAszH0fpnrBE6zLfFL:t3wwEAgjQ0lEEmbfZBUGgszH0f1rBE61
TLSH
AC22AE54278FADD8D161384A3754568CAF5BE5C459C24E22FE8954E89EB7FC34D0ECC0
3 malicious · 4 files
ZIP121298528af04c49d69b0ddd8cd69e14T1059.001 · T1059.003 · T1204.002LOLBin
MP4VID_20260728_070158.mp4
LNKIMG_20260728_192848.jpg.lnkT1059.001 · T1059.003 · T1204.002LOLBin
SHLNK CommandLine
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
Structural branches: 2
STICH kept: 1secondary ignored: 1
bin
1Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
arc:zip>lnk~T1059.001~T1059.003~T1202~T1204.002>lnk:cmd
Shape
arc:zip>lnk>lnk:cmd
malicious
3 nodes
LNK: Command Execution
UNKNWOWNmalicious
powershuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential3 malicious · 4 files
ZIP121298528af04c49d69b0ddd8cd69e14T1059.001 · T1059.003 · T1204.002LOLBin
MP4VID_20260728_070158.mp4
LNKIMG_20260728_192848.jpg.lnkT1059.001 · T1059.003 · T1204.002LOLBin
SHLNK CommandLine
No malware configuration was found at this point.
LNK: Command Execution
UNKNWOWNmalicious
powershuhuhuhuhuhuhuhuhuhuhu
121298528af04c49d69b0ddd8cd69e14 › IMG_20260728_192848.jpg.lnk
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with EssentialSign in or create a free account to view the matching YARA rules.
Create a free account