Malicious ZIP Archive (LOLBin) analysis – 38ce4bb882a9

Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

Unlock with Essential

File

Type

ZIP archive

Size

15.21 KB · 15,214 B

First seen

2026-07-29 06:46 · 3 months ago

Last seen

2026-07-29 06:46 · 3 months ago

Last analysis

2026-07-29 06:46 · 3 months ago

Hashes

MD5 cd319bbd64bb4fc86430db7cfa32aaef Sha1 0c174586ba135fc60094b3211f99dd02e27974f7 Sha256 38ce4bb882a9cfbfac947bf01f3cea063dc04286a17c4efea9a0cb3569d86dde Sha384 447a189c28a114cd7c235105c5dbe3c9101546cc049415133bcf74a41d0c5778d43e42e19d4ec5b7dd391ecd5aa8e064 Sha512 47600bdeb140423167c279e8f634306345991eec1b1eff6556d704e9a8bcbfdf317f300ed5bd21064a7988672991c371cb8eb0badcde7d1bb898384caa96f809 SSDeep 384:iiHJp4xf6z1BpebLUXRwNPto8gyesW2xllHuEO8ugySHcdkob:iiHJ2+TiLcRIPto8pesncETHcp TLSH D762C1A6E2652737D211E051D00B4C0B1EBD849FD9F21A13F3EA8CEF995515E2918EAC

3 malicious · 4 files

ZIPcd319bbd64bb4fc86430db7cfa32aaefLOLBin

MP4VID_20260728_190501.mp4

LNKIMG_20260728_234637.jpg.lnkLOLBin

SHLNK CommandLine

STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

Structural branches: 2 STICH kept: 1secondary ignored: 1

bin 1

Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.

Path arc:zip>lnk~T1059.001~T1059.003~T1202~T1204.002>lnk:cmd

Shape arc:zip>lnk>lnk:cmd

malicious 3 nodes

LNK: Command Execution UNKNWOWNmalicious

powershuhuhuhuhuhuhuhuhuhuhu

Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.

Unlock with Essential