Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
File
Type
ZIP archive
Size
6.62 KB · 6,616 B
First seen
2026-07-25 10:31 · 3 months ago
Last seen
2026-07-25 10:31 · 3 months ago
Last analysis
2026-07-26 04:58 · 3 months ago
Hashes
MD5 ab2d50eaa84d695c7b0896507ac726e3 Sha1 4bac535e8c76d2154cf11ccadb26eed88c778ff2 Sha256 389973dd832fb762d2770e5c615d688f95f260cb5f5bbc6ce93a0f447046a694 Sha384 399d88d5f6e8c2d81e91a0a85ffd5888d916de70e78666a6ff73745794ad8cf45ab93231b322f721a91c036ee9a5e9bf Sha512 72dcdf3f2e7283171c6ebf73416fd26aa935220a81af2e3fda969fa2aeb5a868a49b07a22f7e020c2762e85b0a8ca326a815761fba97d363c45395ef75d98315 SSDeep 192:A+q8PAbwyl5+qg2mI5KTrXBNPYKP77SiXcq:Rybwy/Xg2fgtBNP77SiX TLSH A9D1AE0C971391F88203A631B2F6FA62459593B51BD3B28E80903E7B93E03E1F93255F
3 malicious · 4 files
ZIPab2d50eaa84d695c7b0896507ac726e3LOLBin
MP4VID_20260725_051515.mp4
LNKIMG_20260725_034229.jpg.lnkLOLBin
SHLNK CommandLine
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

Structural branches: 2 STICH kept: 1secondary ignored: 1
bin 1

Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
Path arc:zip>lnk~T1059.001~T1059.003~T1202~T1204.002>lnk:cmd
Shape arc:zip>lnk>lnk:cmd
malicious 3 nodes
LNK: Command Execution UNKNWOWNmalicious
powershuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential
3 malicious · 4 files
ZIPab2d50eaa84d695c7b0896507ac726e3LOLBin
MP4VID_20260725_051515.mp4
LNKIMG_20260725_034229.jpg.lnkLOLBin
SHLNK CommandLine
No malware configuration was found at this point.
LNK: Command Execution UNKNWOWNmalicious
powershuhuhuhuhuhuhuhuhuhuhu
ab2d50eaa84d695c7b0896507ac726e3 › IMG_20260725_034229.jpg.lnk
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential
Sign in or create a free account to view the matching YARA rules. Create a free account
An error has occurred. This application may no longer respond until reloaded. Reload 🗙