Malicious ZIP Archive (LOLBin) analysis – 02625c228991

Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

Unlock with Essential

File

Type

ZIP archive

Size

9.37 KB · 9,368 B

First seen

2026-08-03 11:52 · 2 months ago

Last seen

2026-08-03 11:52 · 2 months ago

Last analysis

2026-08-03 11:52 · 2 months ago

Hashes

MD5 c4a68e944e4f7e1a7c2dade075e382d4 Sha1 fdf66512da6005dc51aba518a35a417a0ea4ec4d Sha256 02625c2289914ee41210c8c10b776b57b795cfd24ae854503f638c188d775956 Sha384 99344a40fb650ba495984cd21a2075fa4233f53ab1545ec9ff48deb3fc92298877e6ae8547be0a2e4bc1c92bdd6dfe6b Sha512 f6121db6defd3769dcdb3d5a5c5fb37460bc7991ebdce07b58d4acc7d8907ce9142fc46f324c5b42e1f7a137df0a10b235262fad152506a714ab39a1a9cb51da SSDeep 192:cnNOXydmw5h7khBb8WH/dPDX36ydznabJNFYlMW+/C1:cNOXyZ/mHFb3/ab3F+71 TLSH D812AFB89828F66D84AAC27EDBF9E53D8F55BA5F786E300206853B542D70BBCC106454

3 malicious · 4 files

ZIPc4a68e944e4f7e1a7c2dade075e382d4LOLBin

MP4VID_20260802_174649.mp4

LNKIMG_20260803_024632.jpg.lnkLOLBin

SHLNK CommandLine

STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

Structural branches: 2 STICH kept: 1secondary ignored: 1

bin 1

Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.

Path arc:zip>lnk~T1059.001~T1059.003~T1202~T1204.002>lnk:cmd

Shape arc:zip>lnk>lnk:cmd

malicious 3 nodes

LNK: Command Execution UNKNWOWNmalicious

powershuhuhuhuhuhuhuhuhuhuhu

Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.

Unlock with Essential