Malicious ZIP Archive (LOLBin) analysis – cf318b1960b9

Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

Unlock with Essential

File

Type

ZIP archive

Size

10.2 KB · 10,196 B

First seen

2026-07-28 06:51 · 3 months ago

Last seen

2026-07-28 06:51 · 3 months ago

Last analysis

2026-07-28 06:51 · 3 months ago

Hashes

MD5 7c93147b0c33df33d86c032b81053cbc Sha1 01cc7e3a0a32e9d082b27fe57db26cd64da22467 Sha256 cf318b1960b9562ca14a9ca4165150945091ff96602452665d55c95b361b63c1 Sha384 661e9b510fc140ff10c88ad8344d545efdabd7743e819105f0755b708c56a4737c649dd08e38c184eec994f168619241 Sha512 e194244f1714ae4435c3571065086b9e2589cdd32e82eb49317e447b41fd378940ce05ee89e0af2432ab0969f3af32e23ff836030398f08bed16a8cbaa185703 SSDeep 192:kiRUPv+zCRsBTjpy3NROHLK4aEQ/DySXGeojNi6aPzVM+s2yGn:tWPw2oyXOrja7/DySWeojNaiQH TLSH CD22BFB696CD6726BA03BF71A6EA691F26D1757987AF20B3920D01D20647004FA0EFC1

3 malicious · 4 files

ZIP7c93147b0c33df33d86c032b81053cbcLOLBin

MP4VID_20260727_151737.mp4

LNKIMG_20260727_182719.jpg.lnkLOLBin

SHLNK CommandLine

STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

Structural branches: 2 STICH kept: 1secondary ignored: 1

bin 1

Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.

Path arc:zip>lnk~T1059.001~T1059.003~T1202~T1204.002>lnk:cmd

Shape arc:zip>lnk>lnk:cmd

malicious 3 nodes

LNK: Command Execution UNKNWOWNmalicious

powershuhuhuhuhuhuhuhuhuhuhu

Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.

Unlock with Essential