Malicious ZIP Archive (LOLBin) analysis – c4b5e27653d3

Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

Unlock with Essential

File

Type

ZIP archive

Size

14.39 KB · 14,385 B

First seen

2026-07-29 06:46 · 3 months ago

Last seen

2026-07-29 06:46 · 3 months ago

Last analysis

2026-07-29 06:46 · 3 months ago

Hashes

MD5 4472019402f423372b9fd27323691eb9 Sha1 bfe28376998e1e4a12b76a743bc4d21b663f8b00 Sha256 c4b5e27653d3183f4c335f17aba89b1daf6cd18ef498cc70b2ce8e8b5c29c1ff Sha384 fc59a5766707bd7c4b02960a01df2501308c2d12154e216c12ba8cd578a2526d910d7e3a004b36a9e754fc3e26e62393 Sha512 0b1e284a660dfcd58a9cb5b5fe70d1cb89e27b3bf0f4db74cd7cd10ab0a2d5dcc1fe1bb3dc50e8b17589b50fc9de5a5ba6cbbf63856e826cff63b6a2586507af SSDeep 384:FohFNkx2sovrhhRI4G4MkMCTg007iX3vsQsoLaDtSfw6k:ShF+avruDkMAg00+HzLgtSfe TLSH A952C007EDC618D9D68A76A0DD53EA02E735AE3B48CB733273F06142F8A859B5B17044

3 malicious · 4 files

ZIP4472019402f423372b9fd27323691eb9LOLBin

MP4VID_20260729_030616.mp4

LNKIMG_20260728_182034.jpg.lnkLOLBin

SHLNK CommandLine

STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

Structural branches: 2 STICH kept: 1secondary ignored: 1

bin 1

Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.

Path arc:zip>lnk~T1059.001~T1059.003~T1202~T1204.002>lnk:cmd

Shape arc:zip>lnk>lnk:cmd

malicious 3 nodes

LNK: Command Execution UNKNWOWNmalicious

powershuhuhuhuhuhuhuhuhuhuhu

Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.

Unlock with Essential