Malicious
ZIP Archive
MD5: 1f470cdc1dd93704bae0458e8d09f2f8
Size: 14.81 KB
application/zip
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
ZIP archive
Size
14.81 KB · 14,810 B
First seen
2026-07-31 06:16 · 2 months ago
Last seen
2026-07-31 06:16 · 2 months ago
Last analysis
2026-07-31 06:16 · 2 months ago
Hashes
MD5
1f470cdc1dd93704bae0458e8d09f2f8
Sha1
aeb74e6ab4b89ffe5d2b622850a603e1c2f6778f
Sha256
caec354761bac8cf7690bd7b8c0c1de72e1f83d073211909a85314edb1188d2d
Sha384
8e8ebe9a7caffd1d83f9796da8fbe2d6e37e4ed58d187aa9401c504eccc712c4843880bc2d0c52ef8b7483f6d362ab05
Sha512
cf86a4d35c2c0c5b97499b65fd58d09d26e3cdc422fe4569eede6bf665e85bb350c578fa90c8f30dbce00644c20ef2d335c2993ea7222d0c53836c967cfcddef
SSDeep
192:t7l/cQU8E9wuiIk0vtj6rjD9Tu3NYd3P6Hh9UTPAU4RuVHGBKIbhXNlAbMM84sJs:rlUZWuhBMh4GPHv4kkYIbhgIM8A
TLSH
6962BFD48FC8A842A168FEBBB1EE3F8AD1904CC0E798060D05F0A95561D3764B7D7B56
3 malicious · 4 files
ZIP1f470cdc1dd93704bae0458e8d09f2f8T1059.001 · T1059.003 · T1204.002LOLBin
MP4VID_20260731_041011.mp4
LNKIMG_20260730_195458.jpg.lnkT1059.001 · T1059.003 · T1204.002LOLBin
SHLNK CommandLine
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
Structural branches: 2
STICH kept: 1secondary ignored: 1
bin
1Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
arc:zip>lnk~T1059.001~T1059.003~T1202~T1204.002>lnk:cmd
Shape
arc:zip>lnk>lnk:cmd
malicious
3 nodes
LNK: Command Execution
UNKNWOWNmalicious
powershuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential