Malicious
94084793c81790328212c073217324b8
ZIP Archive
MD5: 94084793c81790328212c073217324b8
Size: 17.33 KB
application/zip
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
ZIP archive
Size
17.33 KB · 17,326 B
First seen
2026-07-25 10:46 · 3 months ago
Last seen
2026-07-25 10:46 · 3 months ago
Last analysis
2026-07-25 18:48 · 3 months ago
Hashes
MD5
94084793c81790328212c073217324b8
Sha1
994701ba6f6f84ee97567151add8b42efdf45c8a
Sha256
62b1befa39b58f6f20c55b0a497e4864735cef17eedffa6e454e56b6d50cbe3a
Sha384
f40491b451387bb549f498ffec2d6f2c6428c236998cd216805949a8e48c0717ae5e381def905b5718c695897c1d173e
Sha512
117e17be2cfa810e37efa2e8239dbd192308e15aca99e05aaf1b367c7c872c80fcf2967616ad705a39d1ce1fc3dc9448a3a0b5885527be6120971b2b9eed0c02
SSDeep
384:XisMhBxwqNUhsB7OXFvwzXh1r1VS6ASMGA7oy+hFyoVuJoOjJTz:XU3xwu3BqXyt1rSxjG5LV6
TLSH
AE72D0876727934FD5278F8AE7D1B2652BB8E4398FD344A2F0358B41B421F0101EB6D5
3 malicious · 4 files
ZIP94084793c81790328212c073217324b8T1059.001 · T1059.003 · T1204.002LOLBin
MP4VID_20260725_063306.mp4
LNKIMG_20260725_052429.jpg.lnkT1059.001 · T1059.003 · T1204.002LOLBin
SHLNK CommandLine
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
Structural branches: 2
STICH kept: 1secondary ignored: 1
bin
1Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
arc:zip>lnk~T1059.001~T1059.003~T1202~T1204.002>lnk:cmd
Shape
arc:zip>lnk>lnk:cmd
malicious
3 nodes
LNK: Command Execution
UNKNWOWNmalicious
powershuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential3 malicious · 4 files
ZIP94084793c81790328212c073217324b8T1059.001 · T1059.003 · T1204.002LOLBin
MP4VID_20260725_063306.mp4
LNKIMG_20260725_052429.jpg.lnkT1059.001 · T1059.003 · T1204.002LOLBin
SHLNK CommandLine
No malware configuration was found at this point.
LNK: Command Execution
UNKNWOWNmalicious
powershuhuhuhuhuhuhuhuhuhuhu
94084793c81790328212c073217324b8 › IMG_20260725_052429.jpg.lnk
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with EssentialSign in or create a free account to view the matching YARA rules.
Create a free account