Malicious
ZIP Archive
MD5: b5b2d2b2ca6fc0d60ca1742838962bee
Size: 11.38 KB
application/zip
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
ZIP archive
Size
11.38 KB · 11,381 B
First seen
2026-07-28 06:49 · 3 months ago
Last seen
2026-07-28 06:49 · 3 months ago
Last analysis
2026-07-28 06:49 · 3 months ago
Hashes
MD5
b5b2d2b2ca6fc0d60ca1742838962bee
Sha1
b8e75a4c5af13ec3036e2c98a686057de18e2de1
Sha256
93303a0513c88774fee7d1d3c707037666a539b2f2b024ac2dac0af9cf73076f
Sha384
4b8a47e708359eac03d31fefdd9b58644b53a721d055240fa0259fa00144622d60137b44865666756d716ea2068f333c
Sha512
a612fc34252ff8bb4c0ec3b118db2a175b4d2cb7ff9b86a483ef4eafaba924b82664cca27c9b5669bb17e38e2a5fd1cf3193567cf18cc2c5d00048e6d69c02c8
SSDeep
192:s2xqf4gGhmhjBeZO1Rcnddi2eLqD/iitiIrNBd/5P2skAZ5YUCpv2XlWXxvFdnbh:sHrJjB+ORcnddRW4/iitvdxrPQ+lWXll
TLSH
7F32C006D0FC50A6E5BB9673DCF99C5E87189BE26117C22731080773EEAA401EC4C4A7
3 malicious · 4 files
ZIPb5b2d2b2ca6fc0d60ca1742838962beeT1059.001 · T1059.003 · T1204.002LOLBin
MP4VID_20260727_232500.mp4
LNKIMG_20260727_232801.jpg.lnkT1059.001 · T1059.003 · T1204.002LOLBin
SHLNK CommandLine
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
Structural branches: 2
STICH kept: 1secondary ignored: 1
bin
1Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
arc:zip>lnk~T1059.001~T1059.003~T1202~T1204.002>lnk:cmd
Shape
arc:zip>lnk>lnk:cmd
malicious
3 nodes
LNK: Command Execution
UNKNWOWNmalicious
powershuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential