Malicious ZIP Archive (LOLBin) analysis – 20284424d188

Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

Unlock with Essential

File

Type

ZIP archive

Size

14.89 KB · 14,892 B

First seen

2026-07-29 06:46 · 3 months ago

Last seen

2026-07-29 06:46 · 3 months ago

Last analysis

2026-07-29 06:46 · 3 months ago

Hashes

MD5 38856c7f778ae98a017c13de62bb57a1 Sha1 1236324d54470ac38539c0eb2fa5801e064c09fa Sha256 20284424d188d855b0d544a01d48b7c2e56063b03d3a3f54cef382169480174a Sha384 8413ef1ed0d0755c2c1594d89584912228ec0aa8a26acfde85a1efa6f8136040e787b6d59b3173a901601c3c4f0c1de9 Sha512 f162a2d8a3d6cfd08182967bb990c6a1521f3084ef1bdd68e4fb828dae970627e5f16224684f4a2d3def5603bebb3df78bf8d78f62d65aabe539f741e680dd0e SSDeep 384:TRfnPbymBiEdV2kfQhR5w4ukzTtxE8CZ15qIZCS:tTy8iEdpfQh3ZTt68uoIZCS TLSH 0A62BF8AC300170A88DFB1BDB545F54A0A4F488EA59C6BF472A2B41C4D17AC36D99EDF

3 malicious · 4 files

ZIP38856c7f778ae98a017c13de62bb57a1LOLBin

MP4VID_20260728_110111.mp4

LNKIMG_20260729_060503.jpg.lnkLOLBin

SHLNK CommandLine

STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

Structural branches: 2 STICH kept: 1secondary ignored: 1

bin 1

Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.

Path arc:zip>lnk~T1059.001~T1059.003~T1202~T1204.002>lnk:cmd

Shape arc:zip>lnk>lnk:cmd

malicious 3 nodes

LNK: Command Execution UNKNWOWNmalicious

powershuhuhuhuhuhuhuhuhuhuhu

Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.

Unlock with Essential