Malicious
688c946b7f79277126158b86c3cea793
ZIP Archive
MD5: 688c946b7f79277126158b86c3cea793
Size: 33.43 KB
application/zip
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
ZIP archive
Size
33.43 KB · 33,433 B
First seen
2026-08-20 03:30 · 2 months ago
Last seen
2026-08-20 03:30 · 2 months ago
Last analysis
2026-08-20 03:30 · 2 months ago
Hashes
MD5
688c946b7f79277126158b86c3cea793
Sha1
08cf5744ca8cd1e9463baec65fbe34ab0d08ce88
Sha256
a5ad2eba3518f3995a1272c7ec6faabb4419eaa7cc2f1614ee8508979eacaf14
Sha384
ed4e9a6c2dae9be2f05e707a6a6a3fdbd59effed1b60cce09461df63573b34eb92ccb84390b64ce537068ac77968d37c
Sha512
d5926e2692478d018e9d6ba8e2fdc2e7570116a62f6f31e1a0696fe041cbc2b074183ae362892677e2ab547cfb3809cea398be1c9d272f97d9e8bc8593a8d908
SSDeep
768:5TSy4ilwO163zLFLIuej0fzTZwP5brOheIf0J6C:5t4ibqfFkuvr2p6hLCN
TLSH
32E2F1EE07837134C0D9B67561086ED94588BE32C8E9F7B90E1DCDE0DA3D70611A4F56
6 malicious · 7 files
ZIP688c946b7f79277126158b86c3cea793T1027 · T1059.001 · T1059.003LOLBin
LNKsnap_55536040013284.lnkT1027 · T1059.001 · T1059.003LOLBin
SHLNK CommandLineT1059.001
PS1[Lnk Summary]T1027 · T1059.001
PS1[Deobfuscated PS]T1027 · T1059.001
PS1[Deobfuscated PS]T1059.001
MP4vid_141974434051.mp4
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
Structural branches: 3
STICH kept: 2secondary ignored: 1
bin
1Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
arc:zip>lnk~T1027~T1059.001~T1059.003~T1202~T1204.002>lnk:cmd~T1059.001
Shape
arc:zip>lnk>lnk:cmd
malicious
3 nodes
Path
arc:zip>lnk~T1027~T1059.001~T1059.003~T1202~T1204.002>scr:ps1~T1027~T1059.001
Shape
arc:zip>lnk>scr:ps1
malicious
3 nodes
LNK: Command Execution
UNKNWOWNmalicious
powershuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential6 malicious · 7 files
ZIP688c946b7f79277126158b86c3cea793T1027 · T1059.001 · T1059.003LOLBin
LNKsnap_55536040013284.lnkT1027 · T1059.001 · T1059.003LOLBin
SHLNK CommandLineT1059.001
PS1[Lnk Summary]T1027 · T1059.001
PS1[Deobfuscated PS]T1027 · T1059.001
PS1[Deobfuscated PS]T1059.001
MP4vid_141974434051.mp4
No malware configuration was found at this point.
LNK: Command Execution
UNKNWOWNmalicious
powershuhuhuhuhuhuhuhuhuhuhu
688c946b7f79277126158b86c3cea793 › snap_55536040013284.lnk
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with EssentialSign in or create a free account to view the matching YARA rules.
Create a free account