Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
File
Type
ZIP archive
Size
13.15 KB · 13,153 B
First seen
2026-07-25 10:49 · 3 months ago
Last seen
2026-07-25 10:49 · 3 months ago
Last analysis
2026-07-25 18:48 · 3 months ago
Hashes
MD5 412aacc9f186db7e8e4c2acfef4dbd06 Sha1 80832a7f75341718e612e806c2c2e20ea2bfac76 Sha256 9a2ab45e138cd5903940a946ca3567651c97c13c8d82743112b94ce8d264f20f Sha384 6f9cc65ff8a6b474443a47908d7efc8633a10feec27fbf1dcf97784b4c5736efb7d198307ebcaa6155e26107ab44e949 Sha512 5bdcd212711386ff527d18f42b32ccd86c31ce27fb41134279041a226af2659afe8e5acb958f5b878969e7e158554b145ed47aa6fcf457b3d85cd95cfb3364cc SSDeep 384:pqWVm0Mz+Y8XHL6iQR4q5C7TRUsUvsKqvn:9s0MzMXS5CXzesTn TLSH 1942E0A323D770ABD04E9A7D26D70A468002DAC0CC3698A65B5DF8981CF398975634EE
3 malicious · 4 files
ZIP412aacc9f186db7e8e4c2acfef4dbd06LOLBin
MP4VID_20260725_034144.mp4
LNKIMG_20260724_221025.jpg.lnkLOLBin
SHLNK CommandLine
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

Structural branches: 2 STICH kept: 1secondary ignored: 1
bin 1

Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
Path arc:zip>lnk~T1059.001~T1059.003~T1202~T1204.002>lnk:cmd
Shape arc:zip>lnk>lnk:cmd
malicious 3 nodes
LNK: Command Execution UNKNWOWNmalicious
powershuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential
3 malicious · 4 files
ZIP412aacc9f186db7e8e4c2acfef4dbd06LOLBin
MP4VID_20260725_034144.mp4
LNKIMG_20260724_221025.jpg.lnkLOLBin
SHLNK CommandLine
No malware configuration was found at this point.
LNK: Command Execution UNKNWOWNmalicious
powershuhuhuhuhuhuhuhuhuhuhu
412aacc9f186db7e8e4c2acfef4dbd06 › IMG_20260724_221025.jpg.lnk
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential
Sign in or create a free account to view the matching YARA rules. Create a free account
An error has occurred. This application may no longer respond until reloaded. Reload 🗙