Malicious
1caa7b1550c158ae8a708de1362fecdc
ZIP Archive
MD5: 1caa7b1550c158ae8a708de1362fecdc
Size: 4.9 KB
application/zip
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
ZIP archive
Size
4.9 KB · 4,902 B
First seen
2026-07-28 06:49 · 3 months ago
Last seen
2026-07-28 06:49 · 3 months ago
Last analysis
2026-07-28 06:49 · 3 months ago
Hashes
MD5
1caa7b1550c158ae8a708de1362fecdc
Sha1
a86f8747c957e315dcfb6904ffee4eaa483f34af
Sha256
de31f95e46b82bcd52b11e42b3c5e6e034e43c3f0d15b024b1ddab373a4e6515
Sha384
564c3a88eca9891bbcbc768aa8598891ac797608220d34c86c80338329aa79d20e44e6b7e5b18bcfeeb219706f177ca2
Sha512
4d1766d687da08116df6bbe8f133e1067c20c96765e70473e94276911bba0eeaa28cba7722027c31f337ce7e81029f8485cd696d7054aa5668eec57d2d8dbf87
SSDeep
96:6FV2DRM0PAtnnvz+uHzA1J150+ouWVY46CDfNQMC3SmjjLRz7trw:699quHkbtOVY45rNcpj/R7q
TLSH
ECA1AD47416A9420C11827F060C09E8D9FFDB5E66A302D20D4AEDC6E063E90E9C4FB98
3 malicious · 4 files
ZIP1caa7b1550c158ae8a708de1362fecdcT1059.001 · T1059.003 · T1204.002LOLBin
MP4VID_20260727_120743.mp4
LNKIMG_20260728_040636.jpg.lnkT1059.001 · T1059.003 · T1204.002LOLBin
SHLNK CommandLine
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
Structural branches: 2
STICH kept: 1secondary ignored: 1
bin
1Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
arc:zip>lnk~T1059.001~T1059.003~T1202~T1204.002>lnk:cmd
Shape
arc:zip>lnk>lnk:cmd
malicious
3 nodes
LNK: Command Execution
UNKNWOWNmalicious
powershuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential3 malicious · 4 files
ZIP1caa7b1550c158ae8a708de1362fecdcT1059.001 · T1059.003 · T1204.002LOLBin
MP4VID_20260727_120743.mp4
LNKIMG_20260728_040636.jpg.lnkT1059.001 · T1059.003 · T1204.002LOLBin
SHLNK CommandLine
No malware configuration was found at this point.
LNK: Command Execution
UNKNWOWNmalicious
powershuhuhuhuhuhuhuhuhuhuhu
1caa7b1550c158ae8a708de1362fecdc › IMG_20260728_040636.jpg.lnk
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with EssentialSign in or create a free account to view the matching YARA rules.
Create a free account