Malicious ZIP Archive (LOLBin) analysis – fb627d67b5a9

Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

Unlock with Essential

File

Type

ZIP archive

Size

1.24 KB · 1,244 B

First seen

2026-07-29 11:31 · 3 months ago

Last seen

2026-07-29 11:31 · 3 months ago

Last analysis

2026-07-29 11:31 · 3 months ago

Hashes

MD5 332b1745cee6c5cf847600c9b9e0b3c6 Sha1 de815bf59f2a5317fb9673cacf9ef63205e6a267 Sha256 fb627d67b5a9b670871c45703f6ccf7a0514cb0027e6f8a67039a6ed9cb3adc1 Sha384 6a46be8b88b9fb35870b940a0f5271243fee410f89c7420f76ae9015eecfc9cc24e49ea22a40f542fead560b0d72e212 Sha512 e9a2ab921f9cd31ab12bb0af965ce39e2190b7305c58c945cd0c4bb1e60da9c98bdc222151f4e6f4af3488bdc10b45dfeddca777790716ea0322964664ee5808 SSDeep 24:9JQI+yYGcKthR4PouhlVxkRtyb2mki3A4P/OINolI9O4RY:92yY8R8VhHuC2Ti33ZoUq TLSH FF21A7489168C7C0C84D8A36BD84D85CB8295D7C514FB77173F605F8332BF8D9A1158C

6 malicious · 8 files

ZIP332b1745cee6c5cf847600c9b9e0b3c6LOLBin

LNKphotov_231356385965.lnkLOLBin

SHLNK CommandLine

PS1[PowerShell Command]

PS1[Deobfuscated PS]

BIN[Lnk Summary]

LNKvideoa_457666029607.mp4

STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.

Path arc:zip>lnk~T1059.001~T1059.003~T1202~T1204.002>lnk:cmd>scr:ps1~T1027~T1059.001

Shape arc:zip>lnk>lnk:cmd>scr:ps1

malicious 4 nodes

Path arc:zip>lnk

Shape arc:zip>lnk

2 nodes

LNK: Command Execution UNKNWOWNmalicious

%COMSPhuhuhuhuhuhuhuhuhuhuhu

Deobfuscated PowerShell UNKNWOWNmalicious

$rftoghuhuhuhuhuhuhuhuhuhuhu

Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.

Unlock with Essential