Malicious
ZIP Archive
MD5: bebcaffe3f5c87985bb5f0da5a74c5ef
Size: 16.59 KB
application/zip
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
ZIP archive
Size
16.59 KB · 16,592 B
First seen
2026-07-29 06:46 · 3 months ago
Last seen
2026-07-29 06:46 · 3 months ago
Last analysis
2026-07-29 06:46 · 3 months ago
Hashes
MD5
bebcaffe3f5c87985bb5f0da5a74c5ef
Sha1
62baee4f85409ba2b76296508b529b2a81d8b769
Sha256
11c44a5af0e4d97f157d39e9a893263ef2758435aec9d7cbf3d2d64ae8dc4ea8
Sha384
98185001bab9ecc43cd09499ef27252a066bd943a98cc6aa8d001f5d52115730ffe1764657451d58f26c7a2fd5a2c197
Sha512
a2f7e6100867220eec86de399d02e5da34f050e2107dbf3e2d14b26ddae540b713d5a3d3259ae9444d1759d40a6eae723991c8248fc7721bb143b18134adb0a5
SSDeep
384:UPd2WHdIuaFsFPDXvii20txyFLcl0doZ5TJhuxyqc4Hqb5enmV03W3Eshw8:UVzaozx22xyFLo5lh94Kb5eEu23
TLSH
FB72D057E1390707D63629A4268510C880E7846F09EFED273BB0CD9FF81D066FF6254A
3 malicious · 4 files
ZIPbebcaffe3f5c87985bb5f0da5a74c5efT1059.001 · T1059.003 · T1204.002LOLBin
MP4VID_20260728_073453.mp4
LNKIMG_20260728_232656.jpg.lnkT1059.001 · T1059.003 · T1204.002LOLBin
SHLNK CommandLine
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
Structural branches: 2
STICH kept: 1secondary ignored: 1
bin
1Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
arc:zip>lnk~T1059.001~T1059.003~T1202~T1204.002>lnk:cmd
Shape
arc:zip>lnk>lnk:cmd
malicious
3 nodes
LNK: Command Execution
UNKNWOWNmalicious
powershuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential