Malicious
ZIP Archive
MD5: b4a72c3b2a2addfcc5dc56c13601c0be
Size: 1.04 KB
application/zip
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
ZIP archive
Size
1.04 KB · 1,039 B
First seen
2026-07-27 04:45 · 3 months ago
Last seen
2026-07-27 04:45 · 3 months ago
Last analysis
2026-07-27 04:46 · 3 months ago
Hashes
MD5
b4a72c3b2a2addfcc5dc56c13601c0be
Sha1
5edca41a51bbacf2a5bf048f82e65c919eafba56
Sha256
7d85ed9fb87c23f6d1a638b99d19265bd30bf981277d4fdbc3cfc3e5c3e0081b
Sha384
54d8b5d05deb376299706c5172ed57e00e7c357bcbf9372d2135a7be15ed647325c99d925b8e31816077dfaed449d2d2
Sha512
4e051b3c8014f47b5bf06ce59b7f3a00d4770830e61c80e9dbb3bd05a277f45f07e3ab077e6a1457971aecf7e89ffdc7511db5fc37d49ee376a23cb949e35122
SSDeep
24:9DPiA1Mx5S1X2TT53BEt9GqxF+pZIwmS6QplLuWhfd+pzOIK:9DF1Mx01X4nO9GqX+fJP6oXl+hOb
TLSH
04119427B842C0E8CD5FCB77B88992C82965E09C3FD1DB8B439A35C77D595A2634A2C4
6 malicious · 8 files
ZIPb4a72c3b2a2addfcc5dc56c13601c0beT1027 · T1059.001 · T1059.003LOLBin
LNKphotov_909683014997.lnkT1027 · T1059.001 · T1059.003LOLBin
SHLNK CommandLineT1027 · T1059.001
PS1[PowerShell Command]T1027 · T1059.001
PS1[Deobfuscated PS]
BIN[Lnk Summary]
LNKvideoa_892807855142.mp4
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
arc:zip>lnk~T1059.001~T1059.003~T1202~T1204.002>lnk:cmd>scr:ps1~T1027~T1059.001
Shape
arc:zip>lnk>lnk:cmd>scr:ps1
malicious
4 nodes
Path
arc:zip>lnk
Shape
arc:zip>lnk
2 nodes
LNK: Command Execution
UNKNWOWNmalicious
%COMSPhuhuhuhuhuhuhuhuhuhuhu
Deobfuscated PowerShell
UNKNWOWNmalicious
$a72x6huhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential