Malicious
a52ff248acab0756111d85876c70215c
ZIP Archive
MD5: a52ff248acab0756111d85876c70215c
Size: 4.38 KB
application/zip
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
ZIP archive
Size
4.38 KB · 4,378 B
First seen
2026-07-28 06:47 · 3 months ago
Last seen
2026-07-28 06:47 · 3 months ago
Last analysis
2026-07-28 06:47 · 3 months ago
Hashes
MD5
a52ff248acab0756111d85876c70215c
Sha1
e996913684e30c25cad430ef5a4045b2f4664b5c
Sha256
17c0ea55fe020b712ca2b6aa8ffeb5d0ac68bc27c91efc342ba3625584c45d7c
Sha384
0ecbe26327aa13d77aeee30b1f199a4a84e4e7f54c79892043b39d0fb5733e020b1083f00b58ed3b6f4950bad0c48ba5
Sha512
a4115bbb9b23475c6db83d4f6eef3ad516b4a441a03319f0878e27a1d28e28f20bd5a927af5ae3dde6f01c75ee91d4d56e8e8090f38a75aca97a83c24e1d4b7e
SSDeep
96:761Y9lpu8zTEHO0pJlD/G74MuJQVvA3b6UrHAGehULr7/:76+93pzY/DlD/GjuJQVvAO09Icr7/
TLSH
26918EB891B5B043DB7A32F02062BD0E35079750EA8978D0BFB7CA1648BE42975C7C32
3 malicious · 4 files
ZIPa52ff248acab0756111d85876c70215cT1059.001 · T1059.003 · T1204.002LOLBin
MP4VID_20260728_060908.mp4
LNKIMG_20260728_032700.jpg.lnkT1059.001 · T1059.003 · T1204.002LOLBin
SHLNK CommandLine
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
Structural branches: 2
STICH kept: 1secondary ignored: 1
bin
1Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
arc:zip>lnk~T1059.001~T1059.003~T1202~T1204.002>lnk:cmd
Shape
arc:zip>lnk>lnk:cmd
malicious
3 nodes
LNK: Command Execution
UNKNWOWNmalicious
powershuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential3 malicious · 4 files
ZIPa52ff248acab0756111d85876c70215cT1059.001 · T1059.003 · T1204.002LOLBin
MP4VID_20260728_060908.mp4
LNKIMG_20260728_032700.jpg.lnkT1059.001 · T1059.003 · T1204.002LOLBin
SHLNK CommandLine
No malware configuration was found at this point.
LNK: Command Execution
UNKNWOWNmalicious
powershuhuhuhuhuhuhuhuhuhuhu
a52ff248acab0756111d85876c70215c › IMG_20260728_032700.jpg.lnk
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with EssentialSign in or create a free account to view the matching YARA rules.
Create a free account