Malicious ZIP Archive (LOLBin) analysis – e544d35f94c9

Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

Unlock with Essential

File

Type

ZIP archive

Size

14.48 KB · 14,484 B

First seen

2026-07-25 10:31 · 3 months ago

Last seen

2026-07-25 10:31 · 3 months ago

Last analysis

2026-07-26 04:58 · 3 months ago

Hashes

MD5 d38d28810a91966b136fa94b514b9002 Sha1 c6a90b0a73de7e9d826a7150fc65f372987efe9b Sha256 e544d35f94c979005ee556c2977d0e7687b41c6719de1582c29093cacd2292c4 Sha384 0ec7fa07bce7f7117868971aa6f281cbcd898f753e89e65a270e4e5fab19c76f61538615f3642fa3faa996a9bf8dea99 Sha512 29d58db17b4ac845bba9a87b487108f47c2575608ac4ddcf8c8dd2a115c4ea5b97dee054de2ec0f41b3f660f50d694ae0c53979b2d54ce002e4614a973e85d30 SSDeep 384:bYiRP2SS5EjxW+hMl2xF48OEe/Wq9u2FffM/1czcgxLjYB34B6:bXRLSSjwNfEaWKzFfz7pB6 TLSH CE52C050CC0B849FDAE7C21432CBBAC717CE607A20D8C71693E9B5B5B1A49CD3A96042

3 malicious · 4 files

ZIPd38d28810a91966b136fa94b514b9002LOLBin

MP4VID_20260725_024218.mp4

LNKIMG_20260724_230129.jpg.lnkLOLBin

SHLNK CommandLine

STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

Structural branches: 2 STICH kept: 1secondary ignored: 1

bin 1

Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.

Path arc:zip>lnk~T1059.001~T1059.003~T1202~T1204.002>lnk:cmd

Shape arc:zip>lnk>lnk:cmd

malicious 3 nodes

LNK: Command Execution UNKNWOWNmalicious

powershuhuhuhuhuhuhuhuhuhuhu

Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.

Unlock with Essential