Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
File
Type
ZIP archive
Size
13.75 KB · 13,752 B
First seen
2026-07-28 07:02 · 3 months ago
Last seen
2026-07-28 07:02 · 3 months ago
Last analysis
2026-07-28 07:02 · 3 months ago
Hashes
MD5 b792fbbcbfba9624d8529088fe6473ec Sha1 533bc7f522df2d6458c6f6b5a93c04b69db40e86 Sha256 36032d880dccb83a4c20a88f08b6da73da33b9ffde996628b32e56c8cbf7c960 Sha384 ec7e46b136b9c87b2f123c6631b5bdef09053e3fb5d82ff723110d1d0b9d33b8cc3e8418280abdd62abdd4478875d851 Sha512 53a3b7c857beed3d8e358164fb9ed6ab6d84292ffed9a749cbff65b95f55971086d0d9e3078e02939d30b485991f80d2f77687033bb1dee59b237d11e9a38af2 SSDeep 384:PfXqU8BQtOeG8Fk5qvccFaHG/oO9G0WBi+1y:Pf8leWQvcOwlssBi+g TLSH 4952CF1DD4FAA7D35E4A0FB110D2DBFC4D769F15DCDA202552AE001D38A6C20CAB12A4
3 malicious · 4 files
ZIPb792fbbcbfba9624d8529088fe6473ecLOLBin
MP4VID_20260727_165858.mp4
LNKIMG_20260727_095439.jpg.lnkLOLBin
SHLNK CommandLine
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

Structural branches: 2 STICH kept: 1secondary ignored: 1
bin 1

Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
Path arc:zip>lnk~T1059.001~T1059.003~T1202~T1204.002>lnk:cmd
Shape arc:zip>lnk>lnk:cmd
malicious 3 nodes
LNK: Command Execution UNKNWOWNmalicious
powershuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential
3 malicious · 4 files
ZIPb792fbbcbfba9624d8529088fe6473ecLOLBin
MP4VID_20260727_165858.mp4
LNKIMG_20260727_095439.jpg.lnkLOLBin
SHLNK CommandLine
No malware configuration was found at this point.
LNK: Command Execution UNKNWOWNmalicious
powershuhuhuhuhuhuhuhuhuhuhu
b792fbbcbfba9624d8529088fe6473ec › IMG_20260727_095439.jpg.lnk
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential
Sign in or create a free account to view the matching YARA rules. Create a free account
An error has occurred. This application may no longer respond until reloaded. Reload 🗙