Malicious ZIP Archive (LOLBin) analysis – aac9fc9f6905

Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

Unlock with Essential

File

Type

ZIP archive

Size

1.17 KB · 1,171 B

First seen

2026-07-27 12:17 · 3 months ago

Last seen

2026-07-27 12:17 · 3 months ago

Last analysis

2026-07-27 12:17 · 3 months ago

Hashes

MD5 3fe9658e6fb6f877c5783fd608eb4b6f Sha1 fabb6122c7a21c8f14962eba2452bf18091f3347 Sha256 aac9fc9f690515a6aafe794f408fae74591575c50ff42fa472c497a584e45c72 Sha384 4b1dde7136502f7114bb017250a5ed689b259c68284a8e331fa74e8561f2da0b1659056c395283c1af8c4e8daf590463 Sha512 3be6ceffad37a71ec32af567bed76b77e4dea477b75c7c0a31a09784693767d87e3e07c2e2f2174451d5fa78fdbe0600356ca5d79990e232ffdeca5fdaaad796 SSDeep 24:9mIisNzj0Jkfk3AkAyQe94KPHgmSM3B4JslGaGB9tKhHO:9t9NzoJyfX+APM3j7GZAu TLSH 4F21CAD08CD95AC1FA077D318400BF84E61BA7050657E3921201649CF5AFD941B19698

6 malicious · 8 files

ZIP3fe9658e6fb6f877c5783fd608eb4b6fLOLBin

LNKphotov_036353162133.lnkLOLBin

SHLNK CommandLine

PS1[PowerShell Command]

PS1[Deobfuscated PS]

BIN[Lnk Summary]

LNKvideoa_955435684352.mp4

STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.

Path arc:zip>lnk~T1059.001~T1059.003~T1202~T1204.002>lnk:cmd>scr:ps1~T1027~T1059.001

Shape arc:zip>lnk>lnk:cmd>scr:ps1

malicious 4 nodes

Path arc:zip>lnk

Shape arc:zip>lnk

2 nodes

LNK: Command Execution UNKNWOWNmalicious

%COMSPhuhuhuhuhuhuhuhuhuhuhu

Deobfuscated PowerShell UNKNWOWNmalicious

$u81r6huhuhuhuhuhuhuhuhuhuhu

Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.

Unlock with Essential