Malicious ZIP Archive (LOLBin) analysis – 2c9dca68d06e

Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

Unlock with Essential

File

Type

ZIP archive

Size

8.97 KB · 8,974 B

First seen

2026-07-28 06:46 · 3 months ago

Last seen

2026-07-28 06:46 · 3 months ago

Last analysis

2026-07-28 06:46 · 3 months ago

Hashes

MD5 5cf7ac254d28026e17f7ec0b2243ea5b Sha1 4d0863d50bc6810b9260e0a71767a26c6052198e Sha256 2c9dca68d06e270b1ce9c526df556804630eb1f263a4d32ee487e3d2f88d64e6 Sha384 5dacf4ed833f4554d44208692a2c83d23d9ee7719f5fcb2900bd32522d0d41e332ab5f47048b4b01fe8f357c4f253102 Sha512 599be3e8d3b4e710ed137d77760b11d77c77b167fbdbcc3e9da17f7016437a113cf4a62bd0a34741027b9f12a5e7028e3f21808cef48fad0154ce11e828c0219 SSDeep 192:odniyYMqfYRGxkGrBmQDnb9uPC9CwtxZgVJiiD3FZn5ThKBD+hc:milDQIntp1uUnPIJjn206 TLSH 1A02AFA30B355063EF798ED141D9BF7BBD3E41E39823812DCDE7954016B9492EAB0218

3 malicious · 4 files

ZIP5cf7ac254d28026e17f7ec0b2243ea5bLOLBin

MP4VID_20260728_003521.mp4

LNKIMG_20260728_055942.jpg.lnkLOLBin

SHLNK CommandLine

STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

Structural branches: 2 STICH kept: 1secondary ignored: 1

bin 1

Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.

Path arc:zip>lnk~T1059.001~T1059.003~T1202~T1204.002>lnk:cmd

Shape arc:zip>lnk>lnk:cmd

malicious 3 nodes

LNK: Command Execution UNKNWOWNmalicious

powershuhuhuhuhuhuhuhuhuhuhu

Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.

Unlock with Essential