Malicious
1f470cdc1dd93704bae0458e8d09f2f8
ZIP Archive
MD5: 1f470cdc1dd93704bae0458e8d09f2f8
Size: 14.81 KB
application/zip
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with Essential
| MD5 | 1f470cdc1dd93704bae0458e8d09f2f8 |
| Sha1 | aeb74e6ab4b89ffe5d2b622850a603e1c2f6778f |
| Sha256 | caec354761bac8cf7690bd7b8c0c1de72e1f83d073211909a85314edb1188d2d |
| Sha384 | 8e8ebe9a7caffd1d83f9796da8fbe2d6e37e4ed58d187aa9401c504eccc712c4843880bc2d0c52ef8b7483f6d362ab05 |
| Sha512 | cf86a4d35c2c0c5b97499b65fd58d09d26e3cdc422fe4569eede6bf665e85bb350c578fa90c8f30dbce00644c20ef2d335c2993ea7222d0c53836c967cfcddef |
| SSDeep | 192:t7l/cQU8E9wuiIk0vtj6rjD9Tu3NYd3P6Hh9UTPAU4RuVHGBKIbhXNlAbMM84sJs:rlUZWuhBMh4GPHv4kkYIbhgIM8A |
| TLSH | 6962BFD48FC8A842A168FEBBB1EE3F8AD1904CC0E798060D05F0A95561D3764B7D7B56 |
Malicious
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
Structural branches: 2
STICH kept: 1secondary ignored: 1
bin
1Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
arc:zip>lnk~T1059.001~T1059.003~T1202~T1204.002>lnk:cmd
Shape
arc:zip>lnk>lnk:cmd
malicious
3 nodes
LNK: Command Execution
UNKNWOWNmalicious
powershuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential
Malicious
No malware configuration was found at this point.
LNK: Command Execution
UNKNWOWNmalicious
powershuhuhuhuhuhuhuhuhuhuhu
1f470cdc1dd93704bae0458e8d09f2f8 › IMG_20260730_195458.jpg.lnk
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential
You must be signed in to view YARA rules.