Malicious ZIP Archive (LOLBin) analysis – 1372210c23d1

Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

Unlock with Essential

File

Type

ZIP archive

Size

9.85 KB · 9,845 B

First seen

2026-07-25 10:33 · 3 months ago

Last seen

2026-07-25 10:33 · 3 months ago

Last analysis

2026-07-25 18:46 · 3 months ago

Hashes

MD5 1c94d3dbe78f978b01823f45b78a78f7 Sha1 203d648a1600c823e38a07750914ed50fd802b3d Sha256 1372210c23d133df8383b26cb08acb7f3d29ac237cf4ed04af1f04b6204e0ec4 Sha384 c9a6ab86c1d906e05a18a8a8db1915d3ca2cac9781b3e08d891d38421aad14b2d10a843e7bb288a6c51552d7b647d60f Sha512 d07b1d5f7ba9e7342abaca2efe57d3d9310a77f1bbe3c9bff66f4924fb29d9758a91f261d6cc3a0b770902b643692c1f0e19c78649e45460defb12509f544242 SSDeep 192:QU6xn/VXLD2WxaOS5s8wq/aJhrroXjM8KfDBZMVAGF2UPS:Q51/VbD2fOpWgZoXj3KD/G7q TLSH 9A12AE2CB84B289C989BA57A3DAB9379067ED8D34409438F12C4C24F1E6F46817EDDC6

3 malicious · 4 files

ZIP1c94d3dbe78f978b01823f45b78a78f7LOLBin

MP4VID_20260725_083355.mp4

LNKIMG_20260725_034404.jpg.lnkLOLBin

SHLNK CommandLine

STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

Structural branches: 2 STICH kept: 1secondary ignored: 1

bin 1

Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.

Path arc:zip>lnk~T1059.001~T1059.003~T1202~T1204.002>lnk:cmd

Shape arc:zip>lnk>lnk:cmd

malicious 3 nodes

LNK: Command Execution UNKNWOWNmalicious

powershuhuhuhuhuhuhuhuhuhuhu

Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.

Unlock with Essential