Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
File
Type
ZIP archive
Size
4.67 KB · 4,668 B
First seen
2026-07-28 06:46 · 3 months ago
Last seen
2026-07-28 06:46 · 3 months ago
Last analysis
2026-07-28 06:46 · 3 months ago
Hashes
MD5 b83da5e4d8e822081020d050bebb6272 Sha1 81d7f4d8a9718f1edc8fe230c6d2e19c58327872 Sha256 abae72bb6fdd76684fc0c0bb4867d68aff09e9ae97f7bd9719b88db28a4812e0 Sha384 d02bac1779d1d96d09768250bf21f6d72cb0a8a87690397fe123bf7683879276b7db9a2dc1ab154090246a466339a45f Sha512 4f7dd184da7d098567fa8c5d8d3bd9a378a686c3f78891123a01acdb8783251e357622517911b7e967ced9ad8b001659bef6946b0a97e4fb803460bbb21c8dc2 SSDeep 96:bOvLBXgt0UjQUFJuJxiwCyooPYW5ASJn9vfdHE2:bOlXidoYBIHnh9 TLSH 4CA17D8FAD975222E48E10B615F60978014DD4DE1127F4F9A8C71F349934AE7239D784
3 malicious · 4 files
ZIPb83da5e4d8e822081020d050bebb6272LOLBin
MP4VID_20260727_174438.mp4
LNKIMG_20260727_161241.jpg.lnkLOLBin
SHLNK CommandLine
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

Structural branches: 2 STICH kept: 1secondary ignored: 1
bin 1

Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
Path arc:zip>lnk~T1059.001~T1059.003~T1202~T1204.002>lnk:cmd
Shape arc:zip>lnk>lnk:cmd
malicious 3 nodes
LNK: Command Execution UNKNWOWNmalicious
powershuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential
3 malicious · 4 files
ZIPb83da5e4d8e822081020d050bebb6272LOLBin
MP4VID_20260727_174438.mp4
LNKIMG_20260727_161241.jpg.lnkLOLBin
SHLNK CommandLine
No malware configuration was found at this point.
LNK: Command Execution UNKNWOWNmalicious
powershuhuhuhuhuhuhuhuhuhuhu
b83da5e4d8e822081020d050bebb6272 › IMG_20260727_161241.jpg.lnk
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential
Sign in or create a free account to view the matching YARA rules. Create a free account
An error has occurred. This application may no longer respond until reloaded. Reload 🗙