Malicious ZIP Archive (LOLBin) analysis – 876872c0fe3d

Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

Unlock with Essential

File

Type

ZIP archive

Size

4.75 KB · 4,751 B

First seen

2026-07-28 10:16 · 3 months ago

Last seen

2026-07-28 10:16 · 3 months ago

Last analysis

2026-07-28 10:16 · 3 months ago

Hashes

MD5 ce57e69ffc160e08f73f3c12dd02aed5 Sha1 a70146a2beaad3fcd2bd61c3430c3a488e061956 Sha256 876872c0fe3d4fc49a6b923f4f26165d6cf5ecb5c8fcf97a4e9cebf5eb31509d Sha384 3047e72f03f6364198707b009b6aa87d86fc036e55822219211d0f6dffa890180dcaa2e8ac230671a50b9d91c5a0a066 Sha512 9670bb8d2a2637d8337a5c837e584e350649060accd2c0f66ead9db7b035568c888edc83af4bc112b21c13ed4eca01cbd9b3b8fa51376af675d5b749ce9bf19a SSDeep 96:PryfpZ9qcl1PRzb4gWGLGCwwprDxLMv4fsPOm5yWlkzPn0:TyfHZl1ZzbHLGCtr24m5APn0 TLSH D9A16D39A19AEF79C4761AB132E32CCB326C9753C1B6C913719085910D52CA9F7103C9

3 malicious · 4 files

ZIPce57e69ffc160e08f73f3c12dd02aed5LOLBin

MP4VID_20260728_071328.mp4

LNKIMG_20260727_200317.jpg.lnkLOLBin

SHLNK CommandLine

STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

Structural branches: 2 STICH kept: 1secondary ignored: 1

bin 1

Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.

Path arc:zip>lnk~T1059.001~T1059.003~T1202~T1204.002>lnk:cmd

Shape arc:zip>lnk>lnk:cmd

malicious 3 nodes

LNK: Command Execution UNKNWOWNmalicious

powershuhuhuhuhuhuhuhuhuhuhu

Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.

Unlock with Essential