Malicious ZIP Archive (LOLBin) analysis – f8851e701a2e

Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

Unlock with Essential

File

Type

ZIP archive

Size

14.98 KB · 14,982 B

First seen

2026-07-28 06:48 · 3 months ago

Last seen

2026-07-28 06:48 · 3 months ago

Last analysis

2026-07-28 06:48 · 3 months ago

Hashes

MD5 1e654d896a1fe44e2e66878d6acebb80 Sha1 cfd3446452d0290607fa364d0f40bf4c31640467 Sha256 f8851e701a2e7305d10eb6e784291242423817ac47aa6949436bf84604c84738 Sha384 b3f45cc23fae5dbb1721799616428b6bcc175f5cc6d1f95063fddeba3214cc522663d6585f18c96dbd67e4aa4d9f1553 Sha512 853877ee99c1c8e68d6d5a75355a3255552e3a0f5a3414bdc1f95c7300b50df32c6c07b84a3da37233d363d6b55f8b13909befa728afc890686a8c088e69cade SSDeep 384:YOKlItKcdLdkAF65Ctxr5zk8hzUXKBLumzJr9wlQ9:DymKcdmAEMRhQJsJrv9 TLSH CD62C0D07E581524CEA4597090B33B91F7F4B0C18A0069327B6D47E5ABF7B620F468B6

3 malicious · 4 files

ZIP1e654d896a1fe44e2e66878d6acebb80LOLBin

MP4VID_20260727_110558.mp4

LNKIMG_20260727_224215.jpg.lnkLOLBin

SHLNK CommandLine

STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

Structural branches: 2 STICH kept: 1secondary ignored: 1

bin 1

Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.

Path arc:zip>lnk~T1059.001~T1059.003~T1202~T1204.002>lnk:cmd

Shape arc:zip>lnk>lnk:cmd

malicious 3 nodes

LNK: Command Execution UNKNWOWNmalicious

powershuhuhuhuhuhuhuhuhuhuhu

Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.

Unlock with Essential