Malicious ZIP Archive (LOLBin) analysis – 860890b795be

Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

Unlock with Essential

File

Type

ZIP archive

Size

1.04 KB · 1,036 B

First seen

2026-07-27 06:17 · 3 months ago

Last seen

2026-07-27 06:17 · 3 months ago

Last analysis

2026-07-27 06:17 · 3 months ago

Hashes

MD5 7e600acf8a5a41c19501448a24f1daf0 Sha1 692a97884cda0432f12112317dab0362d6a4c38e Sha256 860890b795bedb7f1d2ec46cdea86ea51a2186639904af42cd4684fb350f9b61 Sha384 fe43f748a87652ecda7123478f167085d06fdb1a6cfa78f255ea7247074ed4c9664daa4c3b9f59b5caccedd344680bb4 Sha512 163a6b9e3122ef904cd012b7022dfaeb1fc010961e913a9e3521ad7cc7c83d5a1b151ee31f7cbd98b5e0c690e41d3678967a87f5275b80e9e875e4cca74eea85 SSDeep 24:9MmzfTVDmJ3Cr3sgsU4xY+gFmSlC4J3xiC:9MmT8J63sZUzpFPlcC TLSH 1C11C81A83EF82B1EE1936B5B8B9992D18335C20C233A04727381F177717D8D433A310

6 malicious · 8 files

ZIP7e600acf8a5a41c19501448a24f1daf0LOLBin

LNKphotov_301576887572.lnkLOLBin

SHLNK CommandLine

PS1[PowerShell Command]

PS1[Deobfuscated PS]

BIN[Lnk Summary]

LNKvideoa_111767376958.mp4

STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.

Path arc:zip>lnk~T1059.001~T1059.003~T1202~T1204.002>lnk:cmd>scr:ps1~T1027~T1059.001

Shape arc:zip>lnk>lnk:cmd>scr:ps1

malicious 4 nodes

Path arc:zip>lnk

Shape arc:zip>lnk

2 nodes

LNK: Command Execution UNKNWOWNmalicious

%COMSPhuhuhuhuhuhuhuhuhuhuhu

Deobfuscated PowerShell UNKNWOWNmalicious

$ir4l huhuhuhuhuhuhuhuhuhuhu

Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.

Unlock with Essential