Malicious
2be804bebd535f090cc82e3f0ca3f0fc
ZIP Archive
MD5: 2be804bebd535f090cc82e3f0ca3f0fc
Size: 11.2 KB
application/zip
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
ZIP archive
Size
11.2 KB · 11,200 B
First seen
2026-07-28 06:48 · 3 months ago
Last seen
2026-07-28 06:48 · 3 months ago
Last analysis
2026-07-28 06:48 · 3 months ago
Hashes
MD5
2be804bebd535f090cc82e3f0ca3f0fc
Sha1
b69fcf426a15ab926a14253cf56cb051af880aa2
Sha256
78df7e7fbcea7a4c9c8515a0202c96b3cccad3fee942ac55261a56a7862687b5
Sha384
353d379fa26ffe8ff2f7028d7b95f31096692a05284e3e0a062f0b88a4a55623676f590ad32461eb4da1d911465bc0c6
Sha512
ddb98eeccbffa2f08b1c8c80753c760243492f0ae06de261efcc032ae71d642c635047776a5361eb133cf77bc18fccb367006dd3f2002c77be1e2eb988e73a41
SSDeep
192:1/Svt3KT2xEI8ysT8jCevdxyR163izWwGPsRWLKvTAqTAazr/DT6xn72:1/So6mVT8jCGdxcKxVPlKUazrr+E
TLSH
0132BFE10746500FC126F37E3DF04C8C9448614B3A3EB9C65615BC6B668AF779326DAC
3 malicious · 4 files
ZIP2be804bebd535f090cc82e3f0ca3f0fcT1059.001 · T1059.003 · T1204.002LOLBin
MP4VID_20260728_060246.mp4
LNKIMG_20260728_011900.jpg.lnkT1059.001 · T1059.003 · T1204.002LOLBin
SHLNK CommandLine
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
Structural branches: 2
STICH kept: 1secondary ignored: 1
bin
1Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
arc:zip>lnk~T1059.001~T1059.003~T1202~T1204.002>lnk:cmd
Shape
arc:zip>lnk>lnk:cmd
malicious
3 nodes
LNK: Command Execution
UNKNWOWNmalicious
powershuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential3 malicious · 4 files
ZIP2be804bebd535f090cc82e3f0ca3f0fcT1059.001 · T1059.003 · T1204.002LOLBin
MP4VID_20260728_060246.mp4
LNKIMG_20260728_011900.jpg.lnkT1059.001 · T1059.003 · T1204.002LOLBin
SHLNK CommandLine
No malware configuration was found at this point.
LNK: Command Execution
UNKNWOWNmalicious
powershuhuhuhuhuhuhuhuhuhuhu
2be804bebd535f090cc82e3f0ca3f0fc › IMG_20260728_011900.jpg.lnk
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with EssentialSign in or create a free account to view the matching YARA rules.
Create a free account