Malicious
61b8a705203a609ce8076db6c326b94b
ZIP Archive
MD5: 61b8a705203a609ce8076db6c326b94b
Size: 13.07 KB
application/zip
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
ZIP archive
Size
13.07 KB · 13,065 B
First seen
2026-07-25 10:32 · 3 months ago
Last seen
2026-07-25 10:32 · 3 months ago
Last analysis
2026-07-25 18:50 · 3 months ago
Hashes
MD5
61b8a705203a609ce8076db6c326b94b
Sha1
fbaed881312d3a117ae5482ff461b71ea3f02b33
Sha256
dcc938ab5c6677815ebda8c284f79193f24da612e06686d12a73b45e3975575e
Sha384
e95d964d2f515e3dd7f9f1aea6a22b4b87de4a90651974c1759b3fcfe8667637ea0126a0befab15cefe43dece847b125
Sha512
581a1bfc4740754c24833d23c971c2a0f93005ea61e39e5f7236a0024367df3bf470cf4d3f713b5119e6b029bd989f499ebcf0b4feea5eed69d07afa6dfec606
SSDeep
192:u5ggeMDaNw20aQndpfewS3PYXfbM0FdwMst5AkXJxAf14m3YKG433BbqStd0fo:u5gg46pfew5jhdwnxI4qg4Bvn0A
TLSH
0542C0C40C5B1023F7E57DED4E6D865B7D08EB1267B8444CE8D44B758B098D3A387721
3 malicious · 4 files
ZIP61b8a705203a609ce8076db6c326b94bT1059.001 · T1059.003 · T1204.002LOLBin
MP4VID_20260724_182519.mp4
LNKIMG_20260725_052322.jpg.lnkT1059.001 · T1059.003 · T1204.002LOLBin
SHLNK CommandLine
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
Structural branches: 2
STICH kept: 1secondary ignored: 1
bin
1Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
arc:zip>lnk~T1059.001~T1059.003~T1202~T1204.002>lnk:cmd
Shape
arc:zip>lnk>lnk:cmd
malicious
3 nodes
LNK: Command Execution
UNKNWOWNmalicious
powershuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential3 malicious · 4 files
ZIP61b8a705203a609ce8076db6c326b94bT1059.001 · T1059.003 · T1204.002LOLBin
MP4VID_20260724_182519.mp4
LNKIMG_20260725_052322.jpg.lnkT1059.001 · T1059.003 · T1204.002LOLBin
SHLNK CommandLine
No malware configuration was found at this point.
LNK: Command Execution
UNKNWOWNmalicious
powershuhuhuhuhuhuhuhuhuhuhu
61b8a705203a609ce8076db6c326b94b › IMG_20260725_052322.jpg.lnk
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with EssentialSign in or create a free account to view the matching YARA rules.
Create a free account