Malicious
bc097f2c167aa2e735d09413569cbf82
ZIP Archive
MD5: bc097f2c167aa2e735d09413569cbf82
Size: 17.4 KB
application/zip
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
ZIP archive
Size
17.4 KB · 17,399 B
First seen
2026-07-25 10:50 · 3 months ago
Last seen
2026-07-25 10:50 · 3 months ago
Last analysis
2026-07-25 18:48 · 3 months ago
Hashes
MD5
bc097f2c167aa2e735d09413569cbf82
Sha1
7a29377655492f6d0429c7bac14aebec13fff63c
Sha256
528b5406867eab28cd8227fec4b374c512cd9fa6931b654e2c6278050c86ebfd
Sha384
e34846372f48e73e376f61b019de776b39c99ddc263413d18f1f3cd58fb9c5ef3363f43a6b76a4a07973e76814eca9f6
Sha512
e01393ae7814477aa14bc685628d0c9585e75f27f3117ca15146d4009e6f5af4505611dbf485a583e7e560cef96a10713d21d423d1ff41cc50b88ef7a619477f
SSDeep
384:zNaoUN7rvieaWfR4ykjKbBfV8qzSnr2V8bDwZewt:RaoUN7bieaWJ4yRdfV8Nr9IZt
TLSH
AF72C0F4D543B128F5B02539FB8D7161AB80595B93C67017D6562068398C4EFB33E7D4
3 malicious · 4 files
ZIPbc097f2c167aa2e735d09413569cbf82T1059.001 · T1059.003 · T1204.002LOLBin
MP4VID_20260724_205933.mp4
LNKIMG_20260725_070444.jpg.lnkT1059.001 · T1059.003 · T1204.002LOLBin
SHLNK CommandLine
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
Structural branches: 2
STICH kept: 1secondary ignored: 1
bin
1Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
arc:zip>lnk~T1059.001~T1059.003~T1202~T1204.002>lnk:cmd
Shape
arc:zip>lnk>lnk:cmd
malicious
3 nodes
LNK: Command Execution
UNKNWOWNmalicious
powershuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential3 malicious · 4 files
ZIPbc097f2c167aa2e735d09413569cbf82T1059.001 · T1059.003 · T1204.002LOLBin
MP4VID_20260724_205933.mp4
LNKIMG_20260725_070444.jpg.lnkT1059.001 · T1059.003 · T1204.002LOLBin
SHLNK CommandLine
No malware configuration was found at this point.
LNK: Command Execution
UNKNWOWNmalicious
powershuhuhuhuhuhuhuhuhuhuhu
bc097f2c167aa2e735d09413569cbf82 › IMG_20260725_070444.jpg.lnk
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with EssentialSign in or create a free account to view the matching YARA rules.
Create a free account