Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
File
Type
ZIP archive
Size
15.82 KB · 15,818 B
First seen
2026-07-28 06:51 · 3 months ago
Last seen
2026-07-28 06:51 · 3 months ago
Last analysis
2026-07-28 06:51 · 3 months ago
Hashes
MD5 3d518c1015963881090dfbde22f945b1 Sha1 8978bd2cba7231479d36383d91e30f88ee291f09 Sha256 d488f2d9c3a80c223eba8a5edcddd375e7eafe2c3299a6d824785959cf2025a1 Sha384 24ceea856c1d653c3ef2bfe424c7d3a5a075c5ae34ab0e4ae78fa72e83e148e10ca38ef9fb2cc735de9dc817a7660d5a Sha512 bede750154efbd5d448b2e2a1c5b83546fdc090c1df6fddc24779a9c98f6f676821f9b38f973c5dcf0123f1a05d082e184aa28224222d1bd99add40a894a1499 SSDeep 384:TQPGpmkG1nh9GVNzFzQLOtZ7Y2qOXkTKE:cWslh9cWLOnDUN TLSH 0662D178528916C0DE4342EB3860D3F6296AE787105F1B1B5E2225D3B13B42C6F4F99F
3 malicious · 4 files
ZIP3d518c1015963881090dfbde22f945b1LOLBin
MP4VID_20260728_034331.mp4
LNKIMG_20260728_001459.jpg.lnkLOLBin
SHLNK CommandLine
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

Structural branches: 2 STICH kept: 1secondary ignored: 1
bin 1

Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
Path arc:zip>lnk~T1059.001~T1059.003~T1202~T1204.002>lnk:cmd
Shape arc:zip>lnk>lnk:cmd
malicious 3 nodes
LNK: Command Execution UNKNWOWNmalicious
powershuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential
3 malicious · 4 files
ZIP3d518c1015963881090dfbde22f945b1LOLBin
MP4VID_20260728_034331.mp4
LNKIMG_20260728_001459.jpg.lnkLOLBin
SHLNK CommandLine
No malware configuration was found at this point.
LNK: Command Execution UNKNWOWNmalicious
powershuhuhuhuhuhuhuhuhuhuhu
3d518c1015963881090dfbde22f945b1 › IMG_20260728_001459.jpg.lnk
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential
Sign in or create a free account to view the matching YARA rules. Create a free account
An error has occurred. This application may no longer respond until reloaded. Reload 🗙