Malicious ZIP Archive (LOLBin) analysis – d4918e743624

Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

Unlock with Essential

File

Type

ZIP archive

Size

1.16 KB · 1,163 B

First seen

2026-07-27 09:16 · 3 months ago

Last seen

2026-07-27 09:16 · 3 months ago

Last analysis

2026-07-27 09:19 · 3 months ago

Hashes

MD5 37b8f3e9a786a5f350280159af26826c Sha1 7ba28c9b0cf6bbdf9291545742e65b7f2b3a46ff Sha256 d4918e743624c7f681179a86b62e1d5c6e9561c3e548337c86f1043d7b698c52 Sha384 703b50cc02022822ec0ab270ef35ee8b0b698cccd1c604e108d19c3fb1b4b19cd620cc05bf2c1f7e87a886b7f4b23ee3 Sha512 4a8ee54a3f5d6064f4799a55f98b219ce0927f0d6cd6daf712fe52e4d56e57589b9b2ad406a9c6d6dd422eedebd08138419b24e9843e516fe8e2e5c1867e6bf5 SSDeep 24:9RIBviQEfpyvk67jNo02RyCWmSJ8c0FWyAGbIr0:9RIQnRyvk6fNo0lPTX12Ig TLSH F82196F80039F821DC9BD6F1250E4A305A629FB293828915813AA5D3765BE9DF3850DD

6 malicious · 8 files

ZIP37b8f3e9a786a5f350280159af26826cLOLBin

LNKphotov_701215966379.lnkLOLBin

SHLNK CommandLine

PS1[PowerShell Command]

PS1[Deobfuscated PS]

BIN[Lnk Summary]

LNKvideoa_359987045403.mp4

STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.

Path arc:zip>lnk~T1059.001~T1059.003~T1202~T1204.002>lnk:cmd>scr:ps1~T1027~T1059.001

Shape arc:zip>lnk>lnk:cmd>scr:ps1

malicious 4 nodes

Path arc:zip>lnk

Shape arc:zip>lnk

2 nodes

LNK: Command Execution UNKNWOWNmalicious

%COMSPhuhuhuhuhuhuhuhuhuhuhu

Deobfuscated PowerShell UNKNWOWNmalicious

$ucr7ohuhuhuhuhuhuhuhuhuhuhu

Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.

Unlock with Essential