Malicious ZIP Archive (LOLBin) analysis – de31f95e46b8

Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

Unlock with Essential

File

Type

ZIP archive

Size

4.9 KB · 4,902 B

First seen

2026-07-28 06:49 · 3 months ago

Last seen

2026-07-28 06:49 · 3 months ago

Last analysis

2026-07-28 06:49 · 3 months ago

Hashes

MD5 1caa7b1550c158ae8a708de1362fecdc Sha1 a86f8747c957e315dcfb6904ffee4eaa483f34af Sha256 de31f95e46b82bcd52b11e42b3c5e6e034e43c3f0d15b024b1ddab373a4e6515 Sha384 564c3a88eca9891bbcbc768aa8598891ac797608220d34c86c80338329aa79d20e44e6b7e5b18bcfeeb219706f177ca2 Sha512 4d1766d687da08116df6bbe8f133e1067c20c96765e70473e94276911bba0eeaa28cba7722027c31f337ce7e81029f8485cd696d7054aa5668eec57d2d8dbf87 SSDeep 96:6FV2DRM0PAtnnvz+uHzA1J150+ouWVY46CDfNQMC3SmjjLRz7trw:699quHkbtOVY45rNcpj/R7q TLSH ECA1AD47416A9420C11827F060C09E8D9FFDB5E66A302D20D4AEDC6E063E90E9C4FB98

3 malicious · 4 files

ZIP1caa7b1550c158ae8a708de1362fecdcLOLBin

MP4VID_20260727_120743.mp4

LNKIMG_20260728_040636.jpg.lnkLOLBin

SHLNK CommandLine

STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

Structural branches: 2 STICH kept: 1secondary ignored: 1

bin 1

Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.

Path arc:zip>lnk~T1059.001~T1059.003~T1202~T1204.002>lnk:cmd

Shape arc:zip>lnk>lnk:cmd

malicious 3 nodes

LNK: Command Execution UNKNWOWNmalicious

powershuhuhuhuhuhuhuhuhuhuhu

Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.

Unlock with Essential