Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
File
Type
ZIP archive
Size
16.01 KB · 16,012 B
First seen
2026-07-28 06:48 · 3 months ago
Last seen
2026-07-28 06:48 · 3 months ago
Last analysis
2026-07-28 06:48 · 3 months ago
Hashes
MD5 87e36970bf21f81c96552d68d1643677 Sha1 128bba954de45065f6885a085d8c727d1266015d Sha256 0581de3be86be85b9d09e2f5a3144e33abce85409c1c491e1b697b8d2d50bca8 Sha384 124374142ea10baf7ab47359fc7a478092ca019d1fe13ed40b30c4b506b35e99a179e9e2a0480149202b19fa8be36ea9 Sha512 2e456e5a30d6ff185dba7be37ddbd9f11f9e6d628794e970c52f530d58abcb5d6d53d5c2432992626252860ca9c737cac993b72604200177ae96f5e6ed0e901a SSDeep 384:+85tBpKtzlAv52RZjofZDczA2k56/vuCRT:+87BpC/oZczXkQV TLSH 9972CFBB830F5CF8D4E6BDF412241CB894CAFDA03DD206EE5C55A179189882EE730326
3 malicious · 4 files
ZIP87e36970bf21f81c96552d68d1643677LOLBin
MP4VID_20260727_181634.mp4
LNKIMG_20260727_070756.jpg.lnkLOLBin
SHLNK CommandLine
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

Structural branches: 2 STICH kept: 1secondary ignored: 1
bin 1

Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
Path arc:zip>lnk~T1059.001~T1059.003~T1202~T1204.002>lnk:cmd
Shape arc:zip>lnk>lnk:cmd
malicious 3 nodes
LNK: Command Execution UNKNWOWNmalicious
powershuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential
3 malicious · 4 files
ZIP87e36970bf21f81c96552d68d1643677LOLBin
MP4VID_20260727_181634.mp4
LNKIMG_20260727_070756.jpg.lnkLOLBin
SHLNK CommandLine
No malware configuration was found at this point.
LNK: Command Execution UNKNWOWNmalicious
powershuhuhuhuhuhuhuhuhuhuhu
87e36970bf21f81c96552d68d1643677 › IMG_20260727_070756.jpg.lnk
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential
Sign in or create a free account to view the matching YARA rules. Create a free account
An error has occurred. This application may no longer respond until reloaded. Reload 🗙