Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
File
Type
ZIP archive
Size
9.21 KB · 9,210 B
First seen
2026-07-28 06:48 · 3 months ago
Last seen
2026-07-28 06:48 · 3 months ago
Last analysis
2026-07-28 06:48 · 3 months ago
Hashes
MD5 29f4d8392a2cee53da933a37ad9e1e61 Sha1 4d045b8e4237f7a57c0ffbd32015049dc180a093 Sha256 e7e7c79f3be654eb5f003b6ee60eb9cab6c46771ff157ce43e7b088cae37f67b Sha384 b83ce161f2a156aeddc75875710a4bc549df8bf1694a8746b17aa0a776e8f7fd8ac7fa2a7c1049601e831c9d2d998798 Sha512 e4a4f76471a9d78ae4513377f6cf2db94d6a7d9b6dd10f8b6d3a7745b3b4b5c983bd12ba2fa669879e76488d19970ba4f2aa1cc616d5802f7706b07b1d3241c9 SSDeep 192:dl7i3hK3vTiLmaBUuKPjlqMMStouxHXwykHO:zSeLiLTtCjghIwygO TLSH 4012BFAF81963CCAD5D83A76F2C82B3E234865488F1562346ACE7E104C3749B4797B4F
3 malicious · 4 files
ZIP29f4d8392a2cee53da933a37ad9e1e61LOLBin
MP4VID_20260727_142759.mp4
LNKIMG_20260727_165508.jpg.lnkLOLBin
SHLNK CommandLine
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

Structural branches: 2 STICH kept: 1secondary ignored: 1
bin 1

Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
Path arc:zip>lnk~T1059.001~T1059.003~T1202~T1204.002>lnk:cmd
Shape arc:zip>lnk>lnk:cmd
malicious 3 nodes
LNK: Command Execution UNKNWOWNmalicious
powershuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential
3 malicious · 4 files
ZIP29f4d8392a2cee53da933a37ad9e1e61LOLBin
MP4VID_20260727_142759.mp4
LNKIMG_20260727_165508.jpg.lnkLOLBin
SHLNK CommandLine
No malware configuration was found at this point.
LNK: Command Execution UNKNWOWNmalicious
powershuhuhuhuhuhuhuhuhuhuhu
29f4d8392a2cee53da933a37ad9e1e61 › IMG_20260727_165508.jpg.lnk
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential
Sign in or create a free account to view the matching YARA rules. Create a free account
An error has occurred. This application may no longer respond until reloaded. Reload 🗙