Malicious
9c3e6f8e33448dcafbfc865847cd4b6c
ZIP Archive
MD5: 9c3e6f8e33448dcafbfc865847cd4b6c
Size: 16.32 KB
application/zip
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
ZIP archive
Size
16.32 KB · 16,323 B
First seen
2026-07-28 06:46 · 3 months ago
Last seen
2026-07-28 06:46 · 3 months ago
Last analysis
2026-07-28 06:46 · 3 months ago
Hashes
MD5
9c3e6f8e33448dcafbfc865847cd4b6c
Sha1
9333e3b7fe96398e18f13feb002734d42bd7deff
Sha256
f7f8334d1ed54504d07483824e35ab14fa6a544b0a16dc3a89f9bb3fcb8367ed
Sha384
554f0cc40bf927058f0903ca339e8d2caa8505b1342273b7779e1e8c0a8362753335ba6368358009a20b13040a02d576
Sha512
8a76ed034f668403e9eeefd28cb2699b7860c3562e3d092902e0dcd5678136437c8efd031314d1ef3c8c82758d1a56fbb8a7e1f3cdbb8d608d30c8c8c2ddc1f0
SSDeep
384:KUW7A0m3+Bk8oVuVnMKcqitg9gq1DPqcFlN11b/T:2Sp8Z35icFTT
TLSH
5B72D0B9838D662BBD15C51A3AD81F6A4B65F0303715F47333F840781588FBC2D21A68
3 malicious · 4 files
ZIP9c3e6f8e33448dcafbfc865847cd4b6cT1059.001 · T1059.003 · T1204.002LOLBin
MP4VID_20260727_095649.mp4
LNKIMG_20260728_062717.jpg.lnkT1059.001 · T1059.003 · T1204.002LOLBin
SHLNK CommandLine
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
Structural branches: 2
STICH kept: 1secondary ignored: 1
bin
1Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
arc:zip>lnk~T1059.001~T1059.003~T1202~T1204.002>lnk:cmd
Shape
arc:zip>lnk>lnk:cmd
malicious
3 nodes
LNK: Command Execution
UNKNWOWNmalicious
powershuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential3 malicious · 4 files
ZIP9c3e6f8e33448dcafbfc865847cd4b6cT1059.001 · T1059.003 · T1204.002LOLBin
MP4VID_20260727_095649.mp4
LNKIMG_20260728_062717.jpg.lnkT1059.001 · T1059.003 · T1204.002LOLBin
SHLNK CommandLine
No malware configuration was found at this point.
LNK: Command Execution
UNKNWOWNmalicious
powershuhuhuhuhuhuhuhuhuhuhu
9c3e6f8e33448dcafbfc865847cd4b6c › IMG_20260728_062717.jpg.lnk
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with EssentialSign in or create a free account to view the matching YARA rules.
Create a free account