Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
File
Type
ZIP archive
Size
13.05 KB · 13,048 B
First seen
2026-07-25 10:47 · 3 months ago
Last seen
2026-07-25 10:47 · 3 months ago
Last analysis
2026-07-25 18:48 · 3 months ago
Hashes
MD5 ae09c526225f04ab83f13519f57e26ae Sha1 ccc75c5acdc192cb112ff788e4b3063f95b05708 Sha256 f91e7ab06d116412bd9c2942d130a0be342c981ac5a711a260cffd5dcfac295b Sha384 bb08692182d6677c3e148caeb1b75c1f483fc83b09eef88a037412a475eb9d5bf7495e449c170590c1930f84f88c9e5a Sha512 3611e75f9edacf3ce192cadb0184086bfd9dc9d25df3fea56b81f48d7c38e566ed3ecaea5553214eabbd8b98ba6d81d932481b7e3c983c66b4f797b1ce1f3971 SSDeep 384:nlVKj95mzlPLFA+kaY9V1x9cDPe3vJybI:2fmzBJA+u9VrCTevOI TLSH 9142C011B6F505FED0767199A6BFA3FA3A49091F739D79D795E8C44C02BD032E944018
3 malicious · 4 files
ZIPae09c526225f04ab83f13519f57e26aeLOLBin
MP4VID_20260725_081711.mp4
LNKIMG_20260724_225156.jpg.lnkLOLBin
SHLNK CommandLine
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

Structural branches: 2 STICH kept: 1secondary ignored: 1
bin 1

Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
Path arc:zip>lnk~T1059.001~T1059.003~T1202~T1204.002>lnk:cmd
Shape arc:zip>lnk>lnk:cmd
malicious 3 nodes
LNK: Command Execution UNKNWOWNmalicious
powershuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential
3 malicious · 4 files
ZIPae09c526225f04ab83f13519f57e26aeLOLBin
MP4VID_20260725_081711.mp4
LNKIMG_20260724_225156.jpg.lnkLOLBin
SHLNK CommandLine
No malware configuration was found at this point.
LNK: Command Execution UNKNWOWNmalicious
powershuhuhuhuhuhuhuhuhuhuhu
ae09c526225f04ab83f13519f57e26ae › IMG_20260724_225156.jpg.lnk
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential
Sign in or create a free account to view the matching YARA rules. Create a free account
An error has occurred. This application may no longer respond until reloaded. Reload 🗙