Malicious ZIP Archive (LOLBin) analysis – 04c86661aff0

Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

Unlock with Essential

File

Type

ZIP archive

Size

1.11 KB · 1,106 B

First seen

2026-07-27 06:32 · 3 months ago

Last seen

2026-07-27 06:32 · 3 months ago

Last analysis

2026-07-27 06:32 · 3 months ago

Hashes

MD5 5277f4e32171eb2506e374e934996484 Sha1 78a374e5069e0558bf8938822cfa60f9ee77f481 Sha256 04c86661aff03fff1892d2172bd883b021e77810e3083963a2722a2a6513d87d Sha384 366750d72fa8a37ac998397f228854df1504f0a74609feca58d0dd1cc26182678c751341e8bde89b35715601d7ffcab2 Sha512 0d6174629606c6e641996cfae7c29a3a81bc80f5ebe84733fdf7e4649362942b8a89813e1711592d1c9e9e2e9ca9272ab615ef6da5349d24ae162668c8f54e9d SSDeep 24:9XGWub2TwcsoNyauqOm22V/UymS3+gWq1mCZEtl:9WJbARsoTr7/UyP3+gWt TLSH FC11B9E185DC8D70CE6F81B974A7E538583C02818595D05A07C5A517DEA6C153F0D954

6 malicious · 8 files

ZIP5277f4e32171eb2506e374e934996484LOLBin

LNKphotov_018843825200.lnkLOLBin

SHLNK CommandLine

PS1[PowerShell Command]

PS1[Deobfuscated PS]

BIN[Lnk Summary]

LNKvideoa_566812994632.mp4

STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.

Path arc:zip>lnk~T1059.001~T1059.003~T1202~T1204.002>lnk:cmd>scr:ps1~T1027~T1059.001

Shape arc:zip>lnk>lnk:cmd>scr:ps1

malicious 4 nodes

Path arc:zip>lnk

Shape arc:zip>lnk

2 nodes

LNK: Command Execution UNKNWOWNmalicious

%COMSPhuhuhuhuhuhuhuhuhuhuhu

Deobfuscated PowerShell UNKNWOWNmalicious

$ov9snhuhuhuhuhuhuhuhuhuhuhu

Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.

Unlock with Essential