Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
File
Type
ZIP archive
Size
14.49 KB · 14,485 B
First seen
2026-07-28 06:48 · 3 months ago
Last seen
2026-07-28 06:48 · 3 months ago
Last analysis
2026-07-28 06:48 · 3 months ago
Hashes
MD5 6ceac46faa68436c13e666aec0ae4baf Sha1 2950df98ecdb11cff4624e3e5561fbe44b9a2508 Sha256 ff227f252b32e43e918752e4ec9a4b555e9db7c72ec7a06c7c87c3892778be6e Sha384 38d56ce305a4202dd9dde1816c1100e01dbf3c6cc9ab2a1aa615f14b1a859ea2446e624b7f9f11b28b14caee4dbe8506 Sha512 f4d7a8fac58c10c50f173436d298b5076cdc3f094b96558680c463c5b94424380f6b4b86b3f7fdd4663602d4fe30cf5859b831db4dfbbba0aa1d502ff85c8d91 SSDeep 384:7Nc6Yvitbr7yOmSKB0j4v89zxoFsQOonNGWyMx3aW:kvitX7y50UUdxoCUnR39 TLSH 8052C030CD10A1109F749E77F9D3DB53A08489E6F06FA3A87E2F600F406DA42496E7A7
3 malicious · 4 files
ZIP6ceac46faa68436c13e666aec0ae4bafLOLBin
MP4VID_20260727_150207.mp4
LNKIMG_20260728_030806.jpg.lnkLOLBin
SHLNK CommandLine
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

Structural branches: 2 STICH kept: 1secondary ignored: 1
bin 1

Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
Path arc:zip>lnk~T1059.001~T1059.003~T1202~T1204.002>lnk:cmd
Shape arc:zip>lnk>lnk:cmd
malicious 3 nodes
LNK: Command Execution UNKNWOWNmalicious
powershuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential
3 malicious · 4 files
ZIP6ceac46faa68436c13e666aec0ae4bafLOLBin
MP4VID_20260727_150207.mp4
LNKIMG_20260728_030806.jpg.lnkLOLBin
SHLNK CommandLine
No malware configuration was found at this point.
LNK: Command Execution UNKNWOWNmalicious
powershuhuhuhuhuhuhuhuhuhuhu
6ceac46faa68436c13e666aec0ae4baf › IMG_20260728_030806.jpg.lnk
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential
Sign in or create a free account to view the matching YARA rules. Create a free account
An error has occurred. This application may no longer respond until reloaded. Reload 🗙