Malicious
7793b015e5530086322b312685bee9f1
ZIP Archive
MD5: 7793b015e5530086322b312685bee9f1
Size: 1.15 KB
application/zip
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
ZIP archive
Size
1.15 KB · 1,149 B
First seen
2026-07-27 12:19 · 3 months ago
Last seen
2026-07-27 12:19 · 3 months ago
Last analysis
2026-07-27 12:19 · 3 months ago
Hashes
MD5
7793b015e5530086322b312685bee9f1
Sha1
354c4abb97fbca599d09bcabdd65cf726d41b18c
Sha256
7c6984cc3da35251a0ab9cf732d192f51ac99df0d848500b2c02ea0273f0cf2e
Sha384
c74c5c95f5a57b05b49ad6e713a1d1d3c32af388a012892cb16276d6ebe459fbcf52bfc3ce00865bdab74fe50f5c36b7
Sha512
62d27d3d86cd97e21e5de431090db580643ff5ea13d16eb470c1b5ad7535e492cca3db5397121b06b03be459cc5da6ea5732891851789692de64bdb906c448f8
SSDeep
24:9SJQSWZ+unUdBU3bCOJusaPG/Ta4FmSqoHrNIGJd+M:9SJQSWYoCbiuovFPqON7h
TLSH
A521372C98AC9943D856D5BF32EB0D40D530535DE406D85F6B0752D1EC92B742F7534B
6 malicious · 8 files
ZIP7793b015e5530086322b312685bee9f1T1027 · T1059.001 · T1059.003LOLBin
LNKphotov_598498738916.lnkT1027 · T1059.001 · T1059.003LOLBin
SHLNK CommandLineT1027 · T1059.001
PS1[PowerShell Command]T1027 · T1059.001
PS1[Deobfuscated PS]
BIN[Lnk Summary]
LNKvideoa_469288217267.mp4
BIN[Lnk Summary]
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
arc:zip>lnk~T1059.001~T1059.003~T1202~T1204.002>lnk:cmd>scr:ps1~T1027~T1059.001
Shape
arc:zip>lnk>lnk:cmd>scr:ps1
malicious
4 nodes
Path
arc:zip>lnk
Shape
arc:zip>lnk
2 nodes
LNK: Command Execution
UNKNWOWNmalicious
%COMSPhuhuhuhuhuhuhuhuhuhuhu
Deobfuscated PowerShell
UNKNWOWNmalicious
$e6rjjhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential6 malicious · 8 files
ZIP7793b015e5530086322b312685bee9f1T1027 · T1059.001 · T1059.003LOLBin
LNKphotov_598498738916.lnkT1027 · T1059.001 · T1059.003LOLBin
SHLNK CommandLineT1027 · T1059.001
PS1[PowerShell Command]T1027 · T1059.001
PS1[Deobfuscated PS]
BIN[Lnk Summary]
LNKvideoa_469288217267.mp4
No malware configuration was found at this point.
LNK: Command Execution
UNKNWOWNmalicious
%COMSPhuhuhuhuhuhuhuhuhuhuhu
7793b015e5530086322b312685bee9f1 › photov_598498738916.lnk
Deobfuscated PowerShell
UNKNWOWNmalicious
$e6rjjhuhuhuhuhuhuhuhuhuhuhu
7793b015e5530086322b312685bee9f1 › photov_598498738916.lnk › LNK CommandLine › [PowerShell Command]
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with EssentialSign in or create a free account to view the matching YARA rules.
Create a free account