Malicious
2c52b2aec5a8db6f4914f7d7a1686059
ZIP Archive
MD5: 2c52b2aec5a8db6f4914f7d7a1686059
Size: 12.7 KB
application/zip
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
ZIP archive
Size
12.7 KB · 12,698 B
First seen
2026-07-28 06:48 · 3 months ago
Last seen
2026-07-28 06:48 · 3 months ago
Last analysis
2026-07-28 06:48 · 3 months ago
Hashes
MD5
2c52b2aec5a8db6f4914f7d7a1686059
Sha1
4ed012a3bbc078a82ce17e292065b1592dac25b4
Sha256
d77fb4007868e7473ecdb840abdfb9494b3c5047da66404b8106717de8671a42
Sha384
c8479bc8d1914b73c78493e32cbb6072715570635ed99c44433855b5430df7623b97b49ded81d1b380e34a03437a7aca
Sha512
3e584fc9ab108c624859f97303c36a3df8dac8f496205268a8d3b2d853ac9a9e10369c2815f9a6dc7fce48d6957c65a0bb425f0e9a312ccc4a08c6e6290059a8
SSDeep
192:Yk+xe7k8BGYWD9Rx43kjkW+gZnaZXAg4WQBNxMXHpOj+JwcoGBoYAef9Cd:YkWeGvhRx4Uj52Qg4WQnxsJlo2Cd
TLSH
5442D084364B885AED69C5DD0263B78B4349E74B0B2EBFEE5104332C46937A964668F2
3 malicious · 4 files
ZIP2c52b2aec5a8db6f4914f7d7a1686059T1059.001 · T1059.003 · T1204.002LOLBin
MP4VID_20260728_055245.mp4
LNKIMG_20260727_084619.jpg.lnkT1059.001 · T1059.003 · T1204.002LOLBin
SHLNK CommandLine
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
Structural branches: 2
STICH kept: 1secondary ignored: 1
bin
1Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
arc:zip>lnk~T1059.001~T1059.003~T1202~T1204.002>lnk:cmd
Shape
arc:zip>lnk>lnk:cmd
malicious
3 nodes
LNK: Command Execution
UNKNWOWNmalicious
powershuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential3 malicious · 4 files
ZIP2c52b2aec5a8db6f4914f7d7a1686059T1059.001 · T1059.003 · T1204.002LOLBin
MP4VID_20260728_055245.mp4
LNKIMG_20260727_084619.jpg.lnkT1059.001 · T1059.003 · T1204.002LOLBin
SHLNK CommandLine
No malware configuration was found at this point.
LNK: Command Execution
UNKNWOWNmalicious
powershuhuhuhuhuhuhuhuhuhuhu
2c52b2aec5a8db6f4914f7d7a1686059 › IMG_20260727_084619.jpg.lnk
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with EssentialSign in or create a free account to view the matching YARA rules.
Create a free account