Malicious
ZIP Archive
MD5: c376c69c115781ee42b226fe27a76383
Size: 16.9 KB
application/zip
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
ZIP archive
Size
16.9 KB · 16,903 B
First seen
2026-07-29 06:46 · 3 months ago
Last seen
2026-07-29 06:46 · 3 months ago
Last analysis
2026-07-29 06:46 · 3 months ago
Hashes
MD5
c376c69c115781ee42b226fe27a76383
Sha1
0992d5a76d4610e789bd4f9388f533d5079a7cf4
Sha256
dd72a0c3cc63e92ecd8b7c06da9fd3decfec0eed569266bb843b9b728b45ab18
Sha384
48651c450c3bbbc124187853871ddbb784c0727c84c07425b80104292e8b4a8cc5d363e5c136e4260ff84ea6c6faeb24
Sha512
c5b7d97b5bbad45a0295b03901c6f0d6df7efb88deed3c1ba052e404255b89fdfc56db7af77b4204532e741110c1c1c734e5990782780e818c23468edf7246f7
SSDeep
192:s86DTcMwFxV36kzGBMndovlvwTwOfb6vjoZ1zvWBlBGrKjd3N+EJ8TnKInUEW0Js:RU8ztWvwTwOfsGhulGWSnRRJqR2vs
TLSH
4172B0E14B8A8A44DE93A2F77175E58903BB47D7C115521C1A9013FF5024DF709A37B7
3 malicious · 4 files
ZIPc376c69c115781ee42b226fe27a76383T1059.001 · T1059.003 · T1204.002LOLBin
MP4VID_20260729_010220.mp4
LNKIMG_20260728_111757.jpg.lnkT1059.001 · T1059.003 · T1204.002LOLBin
SHLNK CommandLine
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
Structural branches: 2
STICH kept: 1secondary ignored: 1
bin
1Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
arc:zip>lnk~T1059.001~T1059.003~T1202~T1204.002>lnk:cmd
Shape
arc:zip>lnk>lnk:cmd
malicious
3 nodes
LNK: Command Execution
UNKNWOWNmalicious
powershuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential