Malicious
50bd871daa4cedb0432ba9361fd469a0
ZIP Archive
MD5: 50bd871daa4cedb0432ba9361fd469a0
Size: 10.91 KB
application/zip
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
ZIP archive
Size
10.91 KB · 10,914 B
First seen
2026-07-28 06:50 · 3 months ago
Last seen
2026-07-28 06:50 · 3 months ago
Last analysis
2026-07-28 06:50 · 3 months ago
Hashes
MD5
50bd871daa4cedb0432ba9361fd469a0
Sha1
d25c08e0f74a01b53ad0fc2a955e17296917cf10
Sha256
5154e955b21691db5bcf77d1768adc2b092edd8916161561db966f8c7b726d62
Sha384
3a129288f6692acd731300831f1a862cbe4355f8fc94585981979a890a2fcba83c0963ea07d20d7c5c6d5a38af7f9797
Sha512
bfb3f92f050da47c470a4955e0e929ba1a9b06ecd9fac5bfada933fdf157a3ad36669a300536f79d45be554580a8bc40f4dd71d5e6f3417d8eebe2b88d597582
SSDeep
192:qDTB7wnwzwCkU+NyPVQMHzwVszaiokfcJrNblXI4oWrryYbGPFS+a/U1ub8:QYwzwCBWMHzwVgtoocJrNpRFrryYbGf3
TLSH
B432AE041C4E84061043F7F2EABBAB765377B429835A28BF8E46229C2F36B09511E71B
3 malicious · 4 files
ZIP50bd871daa4cedb0432ba9361fd469a0T1059.001 · T1059.003 · T1204.002LOLBin
MP4VID_20260727_081554.mp4
LNKIMG_20260727_124952.jpg.lnkT1059.001 · T1059.003 · T1204.002LOLBin
SHLNK CommandLine
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
Structural branches: 2
STICH kept: 1secondary ignored: 1
bin
1Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
arc:zip>lnk~T1059.001~T1059.003~T1202~T1204.002>lnk:cmd
Shape
arc:zip>lnk>lnk:cmd
malicious
3 nodes
LNK: Command Execution
UNKNWOWNmalicious
powershuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential3 malicious · 4 files
ZIP50bd871daa4cedb0432ba9361fd469a0T1059.001 · T1059.003 · T1204.002LOLBin
MP4VID_20260727_081554.mp4
LNKIMG_20260727_124952.jpg.lnkT1059.001 · T1059.003 · T1204.002LOLBin
SHLNK CommandLine
No malware configuration was found at this point.
LNK: Command Execution
UNKNWOWNmalicious
powershuhuhuhuhuhuhuhuhuhuhu
50bd871daa4cedb0432ba9361fd469a0 › IMG_20260727_124952.jpg.lnk
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with EssentialSign in or create a free account to view the matching YARA rules.
Create a free account