Malicious ZIP Archive (LOLBin) analysis – a593671a6b00

Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

Unlock with Essential

File

Type

ZIP archive

Size

1.14 KB · 1,143 B

First seen

2026-07-27 06:31 · 3 months ago

Last seen

2026-07-27 06:31 · 3 months ago

Last analysis

2026-07-27 06:31 · 3 months ago

Hashes

MD5 d66564536ed8b75303cae8e6734155a6 Sha1 7b571da5df4ca8ebf4597a836613d58064914353 Sha256 a593671a6b004910acba9a307285b5c13281be56990a2d75b65ce563f971ec30 Sha384 2763838f13b6ae3cd789d646139ff3308ad5a672f994d4c7dbaded214daa1b1e6127b7bad1bc86a36faf280459d9185e Sha512 d0ef9cae27822efd4cd7d4384a08ba951e1cd43ae42e0339a31b769f0c13a3ca0e1aedffad19776003a6841f764bf1e8cb4396600c8d8ef00fe7316ce48cf8db SSDeep 24:9AkRzpoTEFYcyVuICOtmq4sAuymGRCZmSjbFWyHwTxS5pj:9AkRzpoCYcyVFC3sAuy5CZPAEsSXj TLSH D521C68882448674CA6AF73D3CD73B1581A34D61E5AF830B0E0125FE4A5A348AF8CFC0

6 malicious · 8 files

ZIPd66564536ed8b75303cae8e6734155a6LOLBin

LNKphotov_821558564324.lnkLOLBin

SHLNK CommandLine

PS1[PowerShell Command]

PS1[Deobfuscated PS]

BIN[Lnk Summary]

LNKvideoa_580879207305.mp4

STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.

Path arc:zip>lnk~T1059.001~T1059.003~T1202~T1204.002>lnk:cmd>scr:ps1~T1027~T1059.001

Shape arc:zip>lnk>lnk:cmd>scr:ps1

malicious 4 nodes

Path arc:zip>lnk

Shape arc:zip>lnk

2 nodes

LNK: Command Execution UNKNWOWNmalicious

%COMSPhuhuhuhuhuhuhuhuhuhuhu

Deobfuscated PowerShell UNKNWOWNmalicious

$nz6f9huhuhuhuhuhuhuhuhuhuhu

Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.

Unlock with Essential