Malicious
8648de0fbe999504aa82da90394c363c
ZIP Archive
MD5: 8648de0fbe999504aa82da90394c363c
Size: 9.52 KB
application/zip
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
ZIP archive
Size
9.52 KB · 9,524 B
First seen
2026-07-29 06:46 · 3 months ago
Last seen
2026-07-29 06:46 · 3 months ago
Last analysis
2026-07-29 06:46 · 3 months ago
Hashes
MD5
8648de0fbe999504aa82da90394c363c
Sha1
8b37fca60ddce74fd392f0c4a97fe57dc480059b
Sha256
d63f9471f0a4a38b64686cba7d3040e0930cdc9e5ce5e6f1f9d77739e0777acb
Sha384
9a3e05cc2d4aa5d919acae7c62f93a2d04bcffeb015ddd19d727acaf541631356516b56ce84db6109a2e5454971113c0
Sha512
7615f781a9e236897e0220dc3ff8402a2343f430879bf84afa24cc55bee6b5aaf98549f76eb4f17f909edca2f2f62536e29cf8e58718da33c05a424a55e45fa5
SSDeep
192:1Eaa9Y7wGEad2IM0kQ7nSR5fD1h/iOm84pxy4nQ78nz7:17a9YlEadHMig5fDTipXz7
TLSH
9C12D034943711A4DC5557BDBFE5125203AE8CB95143B39A644BE478743E488BF7AC34
3 malicious · 4 files
ZIP8648de0fbe999504aa82da90394c363cT1059.001 · T1059.003 · T1204.002LOLBin
MP4VID_20260728_210447.mp4
LNKIMG_20260728_093948.jpg.lnkT1059.001 · T1059.003 · T1204.002LOLBin
SHLNK CommandLine
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
Structural branches: 2
STICH kept: 1secondary ignored: 1
bin
1Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
arc:zip>lnk~T1059.001~T1059.003~T1202~T1204.002>lnk:cmd
Shape
arc:zip>lnk>lnk:cmd
malicious
3 nodes
LNK: Command Execution
UNKNWOWNmalicious
powershuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential3 malicious · 4 files
ZIP8648de0fbe999504aa82da90394c363cT1059.001 · T1059.003 · T1204.002LOLBin
MP4VID_20260728_210447.mp4
LNKIMG_20260728_093948.jpg.lnkT1059.001 · T1059.003 · T1204.002LOLBin
SHLNK CommandLine
No malware configuration was found at this point.
LNK: Command Execution
UNKNWOWNmalicious
powershuhuhuhuhuhuhuhuhuhuhu
8648de0fbe999504aa82da90394c363c › IMG_20260728_093948.jpg.lnk
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with EssentialSign in or create a free account to view the matching YARA rules.
Create a free account