Malicious
2195641a45c95be8a3a2436f621b0905
ZIP Archive
MD5: 2195641a45c95be8a3a2436f621b0905
Size: 17.27 KB
application/zip
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
ZIP archive
Size
17.27 KB · 17,273 B
First seen
2026-07-29 06:46 · 3 months ago
Last seen
2026-07-29 06:46 · 3 months ago
Last analysis
2026-07-29 06:46 · 3 months ago
Hashes
MD5
2195641a45c95be8a3a2436f621b0905
Sha1
eb7b4637b2ed7d333685ba3ecc17b25face07c87
Sha256
444c17dec37e72ad5998e3347e8749ab8af0236c2aad7db29f44ddc4bb3b1bde
Sha384
4750f4fcf774733e1eee14a899d2192b6cd8c0321f00b68a93aef89c841da6978c8e20b6f12fdf549c45fede565800f5
Sha512
6e5fbaefeb37b4cfb9972244c8b7de43710bf503d9e5fa604771d7ffe29db7a9a3da43440a592ae2fc633f0f576aebaf6c6fca679978ca3a1cddd19e8e1a652d
SSDeep
384:4rV8GvkLLKa5ux5lIOawoXdH6msRGWeoPGMz7CSsK:44Qx5oXB6vRGWe0hsK
TLSH
9772CF73204AC8F5F6054F32038A3AE52CADAC12D257A55E7B5560B08D918F7257FFA3
3 malicious · 4 files
ZIP2195641a45c95be8a3a2436f621b0905T1059.001 · T1059.003 · T1204.002LOLBin
MP4VID_20260728_133759.mp4
LNKIMG_20260729_052439.jpg.lnkT1059.001 · T1059.003 · T1204.002LOLBin
SHLNK CommandLine
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
Structural branches: 2
STICH kept: 1secondary ignored: 1
bin
1Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
arc:zip>lnk~T1059.001~T1059.003~T1202~T1204.002>lnk:cmd
Shape
arc:zip>lnk>lnk:cmd
malicious
3 nodes
LNK: Command Execution
UNKNWOWNmalicious
powershuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential3 malicious · 4 files
ZIP2195641a45c95be8a3a2436f621b0905T1059.001 · T1059.003 · T1204.002LOLBin
MP4VID_20260728_133759.mp4
LNKIMG_20260729_052439.jpg.lnkT1059.001 · T1059.003 · T1204.002LOLBin
SHLNK CommandLine
No malware configuration was found at this point.
LNK: Command Execution
UNKNWOWNmalicious
powershuhuhuhuhuhuhuhuhuhuhu
2195641a45c95be8a3a2436f621b0905 › IMG_20260729_052439.jpg.lnk
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with EssentialSign in or create a free account to view the matching YARA rules.
Create a free account