Malicious ZIP Archive (LOLBin) analysis – b9d5637edb3b

Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

Unlock with Essential

File

Type

ZIP archive

Size

1.05 KB · 1,051 B

First seen

2026-07-27 12:16 · 3 months ago

Last seen

2026-07-27 12:16 · 3 months ago

Last analysis

2026-07-27 12:17 · 3 months ago

Hashes

MD5 330b5748700d5df996e791564b58fe83 Sha1 19993074356adb6af7bd61ddd45130febcd33d45 Sha256 b9d5637edb3b651988d53407ccf4c5b916cfda59fab4d01a69e93213b5243cb4 Sha384 5800abf80de1b9c0cb4fce8327b7053111de3062004ca9cb6262cd2b09e2ba2bec949b28bba7776d269c97f1dcd139f5 Sha512 2b06ff249872766d3d0c58425fac1b645b28925ab767e622c9ce85310861fea60f3621a744e982fc645b0c8b508db0b4f3ae907ab4241b852597622c456fcb83 SSDeep 24:9um8sCMHaq4xmap6GW+7k3ZKEFmSHhDY7mmV938z:9umoP149ZXFPBDY7m1z TLSH C211C88DB4DEC596CF0B4572F60AC629046DCA4BC4000DF7174C297A3666EA0024DEE0

6 malicious · 8 files

ZIP330b5748700d5df996e791564b58fe83LOLBin

LNKphotov_606583489143.lnkLOLBin

SHLNK CommandLine

PS1[PowerShell Command]

PS1[Deobfuscated PS]

BIN[Lnk Summary]

LNKvideoa_456969784125.mp4

STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.

Path arc:zip>lnk~T1059.001~T1059.003~T1202~T1204.002>lnk:cmd>scr:ps1~T1027~T1059.001

Shape arc:zip>lnk>lnk:cmd>scr:ps1

malicious 4 nodes

Path arc:zip>lnk

Shape arc:zip>lnk

2 nodes

LNK: Command Execution UNKNWOWNmalicious

%COMSPhuhuhuhuhuhuhuhuhuhuhu

Deobfuscated PowerShell UNKNWOWNmalicious

$vlcw huhuhuhuhuhuhuhuhuhuhu

Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.

Unlock with Essential