Malicious
ZIP Archive
MD5: 6fbcec840bbc84dfb294c1d2f239beba
Size: 1.28 KB
application/zip
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
ZIP archive
Size
1.28 KB · 1,278 B
First seen
2026-07-27 09:16 · 3 months ago
Last seen
2026-07-27 09:16 · 3 months ago
Last analysis
2026-07-27 09:19 · 3 months ago
Hashes
MD5
6fbcec840bbc84dfb294c1d2f239beba
Sha1
92e7e1f5cb708c2e286b2ff6477374726898ac8e
Sha256
89d141a62a24ae590a88e8c61448b555b6f95147d8a583ada6b743df376070ce
Sha384
4d1c03c81cde35417bfe80ff75c565017e78831bf135e8737dbfab882803036a013bb89ee0d0ec3d4fb7bc0a96737031
Sha512
48fecdf7f7187fa76fcb880238591c3ab9e2b9dfede7dcefb6592a21b51807f09552c7fcc37a74f8269460ca4929f9abfa53908be92180353a7a97f5675ac1b6
SSDeep
24:9iQsUSipgWNJ/CDQr6E6S0vFIIjEOWs7vul8ZmSk+v/RWyw57DNX8VQF+8P:9FsZ0NJBc/IIjEvYul8ZPk1t7DF9s8P
TLSH
40218791D42ED8C1D34B4BB80D54DB5C3B5E4AB1114A0F057671D5A77CAE90437CD390
6 malicious · 8 files
ZIP6fbcec840bbc84dfb294c1d2f239bebaT1027 · T1059.001 · T1059.003LOLBin
LNKphotov_212543868170.lnkT1027 · T1059.001 · T1059.003LOLBin
SHLNK CommandLineT1027 · T1059.001
PS1[PowerShell Command]T1027 · T1059.001
PS1[Deobfuscated PS]
BIN[Lnk Summary]
LNKvideoa_953259642561.mp4
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
arc:zip>lnk~T1059.001~T1059.003~T1202~T1204.002>lnk:cmd>scr:ps1~T1027~T1059.001
Shape
arc:zip>lnk>lnk:cmd>scr:ps1
malicious
4 nodes
Path
arc:zip>lnk
Shape
arc:zip>lnk
2 nodes
LNK: Command Execution
UNKNWOWNmalicious
%COMSPhuhuhuhuhuhuhuhuhuhuhu
Deobfuscated PowerShell
UNKNWOWNmalicious
$wlrxuhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential