Malicious
a87199aad34d55be0ee2a1ef932f4e9a
ZIP Archive
MD5: a87199aad34d55be0ee2a1ef932f4e9a
Size: 7.7 KB
application/zip
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
ZIP archive
Size
7.7 KB · 7,697 B
First seen
2026-07-25 10:31 · 3 months ago
Last seen
2026-07-25 10:31 · 3 months ago
Last analysis
2026-07-26 04:58 · 3 months ago
Hashes
MD5
a87199aad34d55be0ee2a1ef932f4e9a
Sha1
0fe2a3354db513e2d09a5c0a0e6b44489add2882
Sha256
63366eded797e1fa35af444d760460617a26951c3986381175b6f6551adfacdd
Sha384
66e63023b1c21557f077d9c063e85bfeaf7bf5de3a3a532832edb09e1d6dfdf8bd0283efdd987b08f14ab4196faff03f
Sha512
6cdee458d2f8c7d4d0a85b220052ab86ad966d76ef473d771ba8e42b63a67eec6fbd8017aa3b8252174aa78450b6479fb0d38048fe9269de868782f4c4263fa6
SSDeep
192:iPFEbuPtSW95eN1jGsEl5+6EWFgq68IcL2:itEyAWnuoC6Xe8IcL2
TLSH
98F18ED14DC8A876E84BC37168671AD1425BFEE343C1568AA73084DF863E28C976859F
3 malicious · 4 files
ZIPa87199aad34d55be0ee2a1ef932f4e9aT1059.001 · T1059.003 · T1204.002LOLBin
MP4VID_20260725_014333.mp4
LNKIMG_20260725_052140.jpg.lnkT1059.001 · T1059.003 · T1204.002LOLBin
SHLNK CommandLine
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
Structural branches: 2
STICH kept: 1secondary ignored: 1
bin
1Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
arc:zip>lnk~T1059.001~T1059.003~T1202~T1204.002>lnk:cmd
Shape
arc:zip>lnk>lnk:cmd
malicious
3 nodes
LNK: Command Execution
UNKNWOWNmalicious
powershuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential3 malicious · 4 files
ZIPa87199aad34d55be0ee2a1ef932f4e9aT1059.001 · T1059.003 · T1204.002LOLBin
MP4VID_20260725_014333.mp4
LNKIMG_20260725_052140.jpg.lnkT1059.001 · T1059.003 · T1204.002LOLBin
SHLNK CommandLine
No malware configuration was found at this point.
LNK: Command Execution
UNKNWOWNmalicious
powershuhuhuhuhuhuhuhuhuhuhu
a87199aad34d55be0ee2a1ef932f4e9a › IMG_20260725_052140.jpg.lnk
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with EssentialSign in or create a free account to view the matching YARA rules.
Create a free account