Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
File
Type
ZIP archive
Size
12.79 KB · 12,791 B
First seen
2026-07-28 10:16 · 3 months ago
Last seen
2026-07-28 10:16 · 3 months ago
Last analysis
2026-07-28 10:16 · 3 months ago
Hashes
MD5 61452f215bc3f5d0f500b06055830b3e Sha1 eff9756b395571d46317713f943dcaae9dca901b Sha256 aed136eb126f89f36d3860af3a604e962ef7cf11e576e56cf271fcf6dbe44f0e Sha384 bb10efdf5244a596b694839f0c0ae4f2520e37a12b347674e15ac45182c2c9b319e48759791ae756da39cedd1e71c359 Sha512 78742a222a7be0033cc92de86dcec3839827536bb14e54e1b88954430934eaf8108c3e318faa1cf086785b6b22e6f65b7acdcc40d026c768928037798ed10845 SSDeep 384:QmYJVGI+bPX/gomi5sidljd1lLDZBlQi6Jp:Qvr+bvjD5s6lj3BG TLSH 0E42BE3BD145074FEBC241B498DF89181AFC31A0A55B3ABB35AC084A19A752AD50760F
3 malicious · 4 files
ZIP61452f215bc3f5d0f500b06055830b3eLOLBin
MP4VID_20260727_180207.mp4
LNKIMG_20260727_214051.jpg.lnkLOLBin
SHLNK CommandLine
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

Structural branches: 2 STICH kept: 1secondary ignored: 1
bin 1

Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
Path arc:zip>lnk~T1059.001~T1059.003~T1202~T1204.002>lnk:cmd
Shape arc:zip>lnk>lnk:cmd
malicious 3 nodes
LNK: Command Execution UNKNWOWNmalicious
powershuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential
3 malicious · 4 files
ZIP61452f215bc3f5d0f500b06055830b3eLOLBin
MP4VID_20260727_180207.mp4
LNKIMG_20260727_214051.jpg.lnkLOLBin
SHLNK CommandLine
No malware configuration was found at this point.
LNK: Command Execution UNKNWOWNmalicious
powershuhuhuhuhuhuhuhuhuhuhu
61452f215bc3f5d0f500b06055830b3e › IMG_20260727_214051.jpg.lnk
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential
Sign in or create a free account to view the matching YARA rules. Create a free account
An error has occurred. This application may no longer respond until reloaded. Reload 🗙