Malicious
c7803aef10683578ccf96af61eed1db0
ZIP Archive
MD5: c7803aef10683578ccf96af61eed1db0
Size: 1.41 KB
application/zip
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
ZIP archive
Size
1.41 KB · 1,407 B
First seen
2026-07-29 11:31 · 3 months ago
Last seen
2026-07-29 11:31 · 3 months ago
Last analysis
2026-07-29 11:31 · 3 months ago
Hashes
MD5
c7803aef10683578ccf96af61eed1db0
Sha1
b563cefc32e051c5c09bae6c962b3912292162e4
Sha256
1c27866a299479060701f024dc15f17701616f786a06baa3c81a032932653eaa
Sha384
8f6db8542b2b06384dd973a0f6dc6352ea0c2842d7f5fa1a26bb7bd60425ef3a45b2dbdd129b1e801c7b05a2f1bd2a6b
Sha512
970474c7a1c29dd6338ff4f21f190f6a07225ce3197cec296a4a4e002ba9bdb3a0ce5ceb1bb6052396a395c0f0478059c8952befc1d511a0bd0e76e0bdcec88b
SSDeep
24:9yPx2b+6e9+weuKjPD7d6OiZZ35dqF8Q9e6WXb4R7mknsMhrwUENSV6MliGHRkB:9y5o+p4weuKjV0NC8EePEZTnFDUSVhi7
TLSH
4D218911C33389A5C46BA130BAF6F3E5616510192D38FB5AC711D1C52D2A58857E5075
6 malicious · 8 files
ZIPc7803aef10683578ccf96af61eed1db0T1027 · T1059.001 · T1059.003LOLBin
LNKphotov_593373192028.lnkT1027 · T1059.001 · T1059.003LOLBin
SHLNK CommandLineT1027 · T1059.001
PS1[PowerShell Command]T1027 · T1059.001
PS1[Deobfuscated PS]
BIN[Lnk Summary]
LNKvideoa_970743816777.mp4
BIN[Lnk Summary]
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
arc:zip>lnk~T1059.001~T1059.003~T1202~T1204.002>lnk:cmd>scr:ps1~T1027~T1059.001
Shape
arc:zip>lnk>lnk:cmd>scr:ps1
malicious
4 nodes
Path
arc:zip>lnk
Shape
arc:zip>lnk
2 nodes
LNK: Command Execution
UNKNWOWNmalicious
%COMSPhuhuhuhuhuhuhuhuhuhuhu
Deobfuscated PowerShell
UNKNWOWNmalicious
$kp3a huhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential6 malicious · 8 files
ZIPc7803aef10683578ccf96af61eed1db0T1027 · T1059.001 · T1059.003LOLBin
LNKphotov_593373192028.lnkT1027 · T1059.001 · T1059.003LOLBin
SHLNK CommandLineT1027 · T1059.001
PS1[PowerShell Command]T1027 · T1059.001
PS1[Deobfuscated PS]
BIN[Lnk Summary]
LNKvideoa_970743816777.mp4
No malware configuration was found at this point.
LNK: Command Execution
UNKNWOWNmalicious
%COMSPhuhuhuhuhuhuhuhuhuhuhu
c7803aef10683578ccf96af61eed1db0 › photov_593373192028.lnk
Deobfuscated PowerShell
UNKNWOWNmalicious
$kp3a huhuhuhuhuhuhuhuhuhuhu
c7803aef10683578ccf96af61eed1db0 › photov_593373192028.lnk › LNK CommandLine › [PowerShell Command]
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with EssentialSign in or create a free account to view the matching YARA rules.
Create a free account