Malicious ZIP Archive (LOLBin) analysis – f65d2b92dfbc

Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

Unlock with Essential

File

Type

ZIP archive

Size

1.18 KB · 1,181 B

First seen

2026-07-27 06:16 · 3 months ago

Last seen

2026-07-27 06:16 · 3 months ago

Last analysis

2026-07-27 06:16 · 3 months ago

Hashes

MD5 d64b7fd3d1daf6ffe87c0dd1797481b6 Sha1 e409ed68d1f31ce5189c931438cb3695c0cf4b7c Sha256 f65d2b92dfbc4eb00248392d1e50a1a248ab9a5012b1d12ed967b9eb0e8d37f9 Sha384 d595ca86836382b5047d6d3a0e19dbebf2c8d613a45bea1598aedcb733e52170c7b31249c90c3dad1772ec5b0c9f3a58 Sha512 d70bc03b11bb032510b6d7f1ff0348115f96ba294fdcf368cea62d87d1758fe69b3d20b9836ebbb7f80d3784635ce9202d800c3fe47cba962816026463479038 SSDeep 24:9HJPNmITgEdCZWZyYic/VOmS3WEkbMHDwn18i:9HJPaEFVOPj8qi TLSH A121965B4096CCF4DC12C93A1D3ECD1204578015C8A4F65367617AFC2D27FBA2F0696D

6 malicious · 8 files

ZIPd64b7fd3d1daf6ffe87c0dd1797481b6LOLBin

LNKphotov_647136879985.lnkLOLBin

SHLNK CommandLine

PS1[PowerShell Command]

PS1[Deobfuscated PS]

BIN[Lnk Summary]

LNKvideoa_358078589800.mp4

STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.

Path arc:zip>lnk~T1059.001~T1059.003~T1202~T1204.002>lnk:cmd>scr:ps1~T1027~T1059.001

Shape arc:zip>lnk>lnk:cmd>scr:ps1

malicious 4 nodes

Path arc:zip>lnk

Shape arc:zip>lnk

2 nodes

LNK: Command Execution UNKNWOWNmalicious

%COMSPhuhuhuhuhuhuhuhuhuhuhu

Deobfuscated PowerShell UNKNWOWNmalicious

$p562 huhuhuhuhuhuhuhuhuhuhu

Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.

Unlock with Essential