Malicious ZIP Archive (LOLBin) analysis – 3f05786bae10

Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

Unlock with Essential

File

Type

ZIP archive

Size

9.93 KB · 9,929 B

First seen

2026-07-28 06:48 · 3 months ago

Last seen

2026-07-28 06:48 · 3 months ago

Last analysis

2026-07-28 06:48 · 3 months ago

Hashes

MD5 d11f6086c1959fa784bb67e02064af31 Sha1 8131a72a716c7b9b5c3fc27822e76e0c83d818c3 Sha256 3f05786bae1090a25478b4b6a774bdf3fbd01d628723a5fe1dabdd6f688320fe Sha384 2a72bece2cefef24b2363bad4dfc73f679ed0108b2263feeb79c526ff45cebd06158fbc46889357514623c2116c91d5c Sha512 fcc8ffefb294cbc47a85b004c3d70f59bb930dba93fa27ae20b1b0220e2aac20c4076ec38e50f92dbbda1a7adc85c2440e32ac7fff94c1c7693f0ad5b5264a6f SSDeep 192:0YgOFEdvpx1F9ENVdJjLt1WHaD438tpR7isX1tzBopfwpPS8rGw:0YJk7F6NVd1x1e8fRR1tg4p6k TLSH 7622C047AE1C9362E3E1B63948E135625000A2E7877377499ADA30F85CF7BC0A755C85

3 malicious · 4 files

ZIPd11f6086c1959fa784bb67e02064af31LOLBin

MP4VID_20260727_231839.mp4

LNKIMG_20260727_113332.jpg.lnkLOLBin

SHLNK CommandLine

STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

Structural branches: 2 STICH kept: 1secondary ignored: 1

bin 1

Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.

Path arc:zip>lnk~T1059.001~T1059.003~T1202~T1204.002>lnk:cmd

Shape arc:zip>lnk>lnk:cmd

malicious 3 nodes

LNK: Command Execution UNKNWOWNmalicious

powershuhuhuhuhuhuhuhuhuhuhu

Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.

Unlock with Essential