Malicious ZIP Archive (LOLBin) analysis – ff227f252b32

Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

Unlock with Essential

File

Type

ZIP archive

Size

14.49 KB · 14,485 B

First seen

2026-07-28 06:48 · 3 months ago

Last seen

2026-07-28 06:48 · 3 months ago

Last analysis

2026-07-28 06:48 · 3 months ago

Hashes

MD5 6ceac46faa68436c13e666aec0ae4baf Sha1 2950df98ecdb11cff4624e3e5561fbe44b9a2508 Sha256 ff227f252b32e43e918752e4ec9a4b555e9db7c72ec7a06c7c87c3892778be6e Sha384 38d56ce305a4202dd9dde1816c1100e01dbf3c6cc9ab2a1aa615f14b1a859ea2446e624b7f9f11b28b14caee4dbe8506 Sha512 f4d7a8fac58c10c50f173436d298b5076cdc3f094b96558680c463c5b94424380f6b4b86b3f7fdd4663602d4fe30cf5859b831db4dfbbba0aa1d502ff85c8d91 SSDeep 384:7Nc6Yvitbr7yOmSKB0j4v89zxoFsQOonNGWyMx3aW:kvitX7y50UUdxoCUnR39 TLSH 8052C030CD10A1109F749E77F9D3DB53A08489E6F06FA3A87E2F600F406DA42496E7A7

3 malicious · 4 files

ZIP6ceac46faa68436c13e666aec0ae4bafLOLBin

MP4VID_20260727_150207.mp4

LNKIMG_20260728_030806.jpg.lnkLOLBin

SHLNK CommandLine

STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

Structural branches: 2 STICH kept: 1secondary ignored: 1

bin 1

Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.

Path arc:zip>lnk~T1059.001~T1059.003~T1202~T1204.002>lnk:cmd

Shape arc:zip>lnk>lnk:cmd

malicious 3 nodes

LNK: Command Execution UNKNWOWNmalicious

powershuhuhuhuhuhuhuhuhuhuhu

Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.

Unlock with Essential