Malicious ZIP Archive (LOLBin) analysis – 017d18bad4c7

Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

Unlock with Essential

File

Type

ZIP archive

Size

10.99 KB · 10,985 B

First seen

2026-07-28 06:49 · 3 months ago

Last seen

2026-07-28 06:49 · 3 months ago

Last analysis

2026-07-28 06:49 · 3 months ago

Hashes

MD5 d4ff93bcc45bc8804453296c09cb614a Sha1 1465294e32e9fbeaa61f4ab5c76b868a9a4dc80c Sha256 017d18bad4c7b867199cf438240624797792d2dec1bd4e2d7031241e856aaa33 Sha384 2a21d8d449ed01f4b4e4336d4a12203c84b65f5daeafbc2d1de617d1452392931728c6a6455f289beb44085ff4681b47 Sha512 814ae63b236d1e080d6b51e5b8a56b58586c601fba3f31b9bcaf0de4693d7600f47a46aa94506beff3a66537e672c732fe78d21d0abc847ed1bd7f1b4e44dc7a SSDeep 192:OyvRtJdg1ybjR8zpv4bVTB+hHIefhsyRu3Xif8ZqweNj0PLyr:1JUS18yDo1hPRu0ID0jr TLSH 4332C0455D1D482DE03317E8F884AE0D9832F0B95BBF3E9E7C8718C620627B70A96746

3 malicious · 4 files

ZIPd4ff93bcc45bc8804453296c09cb614aLOLBin

MP4VID_20260727_210316.mp4

LNKIMG_20260728_050005.jpg.lnkLOLBin

SHLNK CommandLine

STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

Structural branches: 2 STICH kept: 1secondary ignored: 1

bin 1

Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.

Path arc:zip>lnk~T1059.001~T1059.003~T1202~T1204.002>lnk:cmd

Shape arc:zip>lnk>lnk:cmd

malicious 3 nodes

LNK: Command Execution UNKNWOWNmalicious

powershuhuhuhuhuhuhuhuhuhuhu

Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.

Unlock with Essential