Malicious ZIP Archive (LOLBin) analysis – b338600681f2

Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

Unlock with Essential

File

Type

ZIP archive

Size

1.18 KB · 1,175 B

First seen

2026-07-27 06:32 · 3 months ago

Last seen

2026-07-27 06:32 · 3 months ago

Last analysis

2026-07-27 06:32 · 3 months ago

Hashes

MD5 5f20649b8a05161a62cd9090668650e7 Sha1 2e39e8015a282027b63033ff1713afaaed7a4bfd Sha256 b338600681f26aedfe556be8d1c2903cdf326c2748ab1b7ae47df9574ba78ace Sha384 47bcb3044d538f9de5fd7d914939515f255faaea7cb126b89e003bdf9809fe43025aabeb93c2453b7e8a76630e110145 Sha512 3e7f1d1a8b559346d7ca65471018ca0bba1d1e17df815482ee110119de979a904d80f1bce39d4b67453834d838b0c5b13e87320742142afc046d9076dca1196c SSDeep 24:96Qao/PsP5XeZc1zgYw5gQLMX4CmSe2h6tMhqUYx4P:9DaosRXIxYShYfPHdM4P TLSH F721A7BE80FBBE01EC668130790676941A998A51E091B30B222C91EFEA657F973804D0

6 malicious · 8 files

ZIP5f20649b8a05161a62cd9090668650e7LOLBin

LNKphotov_616576703618.lnkLOLBin

SHLNK CommandLine

PS1[PowerShell Command]

PS1[Deobfuscated PS]

BIN[Lnk Summary]

LNKvideoa_820375334720.mp4

STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.

Path arc:zip>lnk~T1059.001~T1059.003~T1202~T1204.002>lnk:cmd>scr:ps1~T1027~T1059.001

Shape arc:zip>lnk>lnk:cmd>scr:ps1

malicious 4 nodes

Path arc:zip>lnk

Shape arc:zip>lnk

2 nodes

LNK: Command Execution UNKNWOWNmalicious

%COMSPhuhuhuhuhuhuhuhuhuhuhu

Deobfuscated PowerShell UNKNWOWNmalicious

$ayqq huhuhuhuhuhuhuhuhuhuhu

Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.

Unlock with Essential