Malicious
38856c7f778ae98a017c13de62bb57a1
ZIP Archive
MD5: 38856c7f778ae98a017c13de62bb57a1
Size: 14.89 KB
application/zip
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
ZIP archive
Size
14.89 KB · 14,892 B
First seen
2026-07-29 06:46 · 3 months ago
Last seen
2026-07-29 06:46 · 3 months ago
Last analysis
2026-07-29 06:46 · 3 months ago
Hashes
MD5
38856c7f778ae98a017c13de62bb57a1
Sha1
1236324d54470ac38539c0eb2fa5801e064c09fa
Sha256
20284424d188d855b0d544a01d48b7c2e56063b03d3a3f54cef382169480174a
Sha384
8413ef1ed0d0755c2c1594d89584912228ec0aa8a26acfde85a1efa6f8136040e787b6d59b3173a901601c3c4f0c1de9
Sha512
f162a2d8a3d6cfd08182967bb990c6a1521f3084ef1bdd68e4fb828dae970627e5f16224684f4a2d3def5603bebb3df78bf8d78f62d65aabe539f741e680dd0e
SSDeep
384:TRfnPbymBiEdV2kfQhR5w4ukzTtxE8CZ15qIZCS:tTy8iEdpfQh3ZTt68uoIZCS
TLSH
0A62BF8AC300170A88DFB1BDB545F54A0A4F488EA59C6BF472A2B41C4D17AC36D99EDF
3 malicious · 4 files
ZIP38856c7f778ae98a017c13de62bb57a1T1059.001 · T1059.003 · T1204.002LOLBin
MP4VID_20260728_110111.mp4
LNKIMG_20260729_060503.jpg.lnkT1059.001 · T1059.003 · T1204.002LOLBin
SHLNK CommandLine
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
Structural branches: 2
STICH kept: 1secondary ignored: 1
bin
1Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
arc:zip>lnk~T1059.001~T1059.003~T1202~T1204.002>lnk:cmd
Shape
arc:zip>lnk>lnk:cmd
malicious
3 nodes
LNK: Command Execution
UNKNWOWNmalicious
powershuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential3 malicious · 4 files
ZIP38856c7f778ae98a017c13de62bb57a1T1059.001 · T1059.003 · T1204.002LOLBin
MP4VID_20260728_110111.mp4
LNKIMG_20260729_060503.jpg.lnkT1059.001 · T1059.003 · T1204.002LOLBin
SHLNK CommandLine
No malware configuration was found at this point.
LNK: Command Execution
UNKNWOWNmalicious
powershuhuhuhuhuhuhuhuhuhuhu
38856c7f778ae98a017c13de62bb57a1 › IMG_20260729_060503.jpg.lnk
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with EssentialSign in or create a free account to view the matching YARA rules.
Create a free account