Malicious ZIP Archive (LOLBin) analysis – c846a22aeea3

Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

Unlock with Essential

File

Type

ZIP archive

Size

16.01 KB · 16,007 B

First seen

2026-07-29 06:46 · 3 months ago

Last seen

2026-07-29 06:46 · 3 months ago

Last analysis

2026-07-29 06:46 · 3 months ago

Hashes

MD5 afad96bf155a8977b7f21ce91b836729 Sha1 1f0b29b866b57efa16b3c965c695190d957bc66a Sha256 c846a22aeea3b8f5d7108ab005bdc2131c517937f41d9567262d586b31570558 Sha384 e30c9040bffa9b09c7ed6f0fe98a23f4f08e74a5928c127488e27ef8f06fb86558e1e3e01e4662bb9c17596c5362b4dc Sha512 1b0f5f6815b992433a98f30e8afb7ab08b77d0cb1492c49f18c443118967af2b3ec07bebfb5faf3c368849841caf42f318801a991e92e17b705843f0fa36b404 SSDeep 384:wYLBA93TMqr33E5aVneZ7bSiV8tf9Iqyajq2bWrFTdqbbsG0:wYLBjqw5eneNbFbDhFr1EnB0 TLSH D572D04D7A5710A5AB9E61437CF7795F68173C899AC60F361FBB2A1B9D3C0A30017900

3 malicious · 4 files

ZIPafad96bf155a8977b7f21ce91b836729LOLBin

MP4VID_20260728_075238.mp4

LNKIMG_20260728_105840.jpg.lnkLOLBin

SHLNK CommandLine

STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

Structural branches: 2 STICH kept: 1secondary ignored: 1

bin 1

Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.

Path arc:zip>lnk~T1059.001~T1059.003~T1202~T1204.002>lnk:cmd

Shape arc:zip>lnk>lnk:cmd

malicious 3 nodes

LNK: Command Execution UNKNWOWNmalicious

powershuhuhuhuhuhuhuhuhuhuhu

Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.

Unlock with Essential