Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
File
Type
ZIP archive
Size
12.45 KB · 12,454 B
First seen
2026-07-28 10:16 · 3 months ago
Last seen
2026-07-28 10:16 · 3 months ago
Last analysis
2026-07-28 10:16 · 3 months ago
Hashes
MD5 8be05b17ff5a66adb7710c6c751ce61a Sha1 e48bd404620bc2c06ba861fff9b1da7bc4fb3a49 Sha256 d88346856911fe4e4f1bbc5bb2e54cbb2c2737d76e6f4c89bd426077853e5e48 Sha384 c4ecf324acd4a662fba5fa74903e498c84b7f904d7d9a47c2b4360d2a59e8a5d829ae323d2b6df9baa0566bd9f65c1c9 Sha512 2844f26ddb32de8337d9bb250ecf5cef328f0ed233dc13a8383801b500bcd91b47adc278ed750802112de9eb16e7fc17c32b56f0929624a840eb4b1c518f243d SSDeep 384:FYnSjdKx6WbrPV1yuknbg79QiehPOZjHcZa:ikdMPbrPV39QphW TLSH CA42C095C84F27E2CA4E44FB58EF1517155DEF7522A29032B28F6B482C140FECD603E6
3 malicious · 4 files
ZIP8be05b17ff5a66adb7710c6c751ce61aLOLBin
MP4VID_20260727_213436.mp4
LNKIMG_20260727_132207.jpg.lnkLOLBin
SHLNK CommandLine
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

Structural branches: 2 STICH kept: 1secondary ignored: 1
bin 1

Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
Path arc:zip>lnk~T1059.001~T1059.003~T1202~T1204.002>lnk:cmd
Shape arc:zip>lnk>lnk:cmd
malicious 3 nodes
LNK: Command Execution UNKNWOWNmalicious
powershuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential
3 malicious · 4 files
ZIP8be05b17ff5a66adb7710c6c751ce61aLOLBin
MP4VID_20260727_213436.mp4
LNKIMG_20260727_132207.jpg.lnkLOLBin
SHLNK CommandLine
No malware configuration was found at this point.
LNK: Command Execution UNKNWOWNmalicious
powershuhuhuhuhuhuhuhuhuhuhu
8be05b17ff5a66adb7710c6c751ce61a › IMG_20260727_132207.jpg.lnk
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential
Sign in or create a free account to view the matching YARA rules. Create a free account
An error has occurred. This application may no longer respond until reloaded. Reload 🗙