Malicious ZIP Archive (LOLBin) analysis – 84ff4bec3f7a

Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

Unlock with Essential

File

Type

ZIP archive

Size

1.19 KB · 1,186 B

First seen

2026-07-27 12:17 · 3 months ago

Last seen

2026-07-27 12:17 · 3 months ago

Last analysis

2026-07-27 12:17 · 3 months ago

Hashes

MD5 1b2f7ef4f09afab6544dbab1634fb0ed Sha1 a39362b3e620f6c8cfdb59193ce55ca7545c5183 Sha256 84ff4bec3f7a01b115616c44a56fdace8e431766c1f6767912d8fc1138ed1aa0 Sha384 2b07a213cfd5c91c752564f73406a92c516dc4cc199b6715ab6489457e98bf152b91a55d6e88784e3788b81d15b51565 Sha512 104bd5d8004f84021cea259f6d79e301a2f8a8b6a3f8ccebdc1e59486fc77b677009cfb55c992b31cfb2425ef2c2ff0212ee2e3ff190bad1d23117749b613859 SSDeep 24:9xTZuHaBsq9eqxWpih2Y2twmSrHhkJiiD+dGoTFl:9xTcH8sq9eqQps22PNSKXTf TLSH 0321C6D4815BCD67D00B63BB7CB345122F2187D95705B296088839AF2DE9C482B034C1

6 malicious · 8 files

ZIP1b2f7ef4f09afab6544dbab1634fb0edLOLBin

LNKphotov_725979296720.lnkLOLBin

SHLNK CommandLine

PS1[PowerShell Command]

PS1[Deobfuscated PS]

BIN[Lnk Summary]

LNKvideoa_654924988364.mp4

STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.

Path arc:zip>lnk~T1059.001~T1059.003~T1202~T1204.002>lnk:cmd>scr:ps1~T1027~T1059.001

Shape arc:zip>lnk>lnk:cmd>scr:ps1

malicious 4 nodes

Path arc:zip>lnk

Shape arc:zip>lnk

2 nodes

LNK: Command Execution UNKNWOWNmalicious

%COMSPhuhuhuhuhuhuhuhuhuhuhu

Deobfuscated PowerShell UNKNWOWNmalicious

$a5bexhuhuhuhuhuhuhuhuhuhuhu

Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.

Unlock with Essential