Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
File
Type
ZIP archive
Size
3.58 KB · 3,579 B
First seen
2026-07-25 10:33 · 3 months ago
Last seen
2026-07-25 10:33 · 3 months ago
Last analysis
2026-07-25 18:50 · 3 months ago
Hashes
MD5 3ed4a409bfb4526f2cb9d67e4f30c8ae Sha1 3a12249afb25d89666887954c6cfb8f946497d90 Sha256 d0946bd003485cf78f65a1067de866da7f085079d6c7fcd96380aafc91669115 Sha384 654e32e7e0a927dd5df92a2dbff966cb49c839b342ec893cef1b16c2f07f6e70442810a4bbbcc94f7328eb54b50740bc Sha512 b708708662fdd1b297b67a7ad54d134ba703e0cdbf81ca34957664528ded00a2970ed181bcde45998c9afe35b58d5679a266a51bc2023b088b0ddf016139f7c6 SSDeep 96:mNKRYvl0Y4M399npfF0tS5dwgDuaV3Q9P:mNKRYOYX00HBDL3s TLSH 57712A2CA39A010AC3FA727637D8274C0A286275E898E73A5347697960B55D9B63C05A
3 malicious · 4 files
ZIP3ed4a409bfb4526f2cb9d67e4f30c8aeLOLBin
MP4VID_20260725_071227.mp4
LNKIMG_20260724_153629.jpg.lnkLOLBin
SHLNK CommandLine
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

Structural branches: 2 STICH kept: 1secondary ignored: 1
bin 1

Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
Path arc:zip>lnk~T1059.001~T1059.003~T1202~T1204.002>lnk:cmd
Shape arc:zip>lnk>lnk:cmd
malicious 3 nodes
LNK: Command Execution UNKNWOWNmalicious
powershuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential
3 malicious · 4 files
ZIP3ed4a409bfb4526f2cb9d67e4f30c8aeLOLBin
MP4VID_20260725_071227.mp4
LNKIMG_20260724_153629.jpg.lnkLOLBin
SHLNK CommandLine
No malware configuration was found at this point.
LNK: Command Execution UNKNWOWNmalicious
powershuhuhuhuhuhuhuhuhuhuhu
3ed4a409bfb4526f2cb9d67e4f30c8ae › IMG_20260724_153629.jpg.lnk
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential
Sign in or create a free account to view the matching YARA rules. Create a free account
An error has occurred. This application may no longer respond until reloaded. Reload 🗙