Malicious
dc4d962b312a55162ff130e222b9ab1f
ZIP Archive
MD5: dc4d962b312a55162ff130e222b9ab1f
Size: 12.31 KB
application/zip
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
ZIP archive
Size
12.31 KB · 12,314 B
First seen
2026-07-28 10:16 · 3 months ago
Last seen
2026-07-28 10:16 · 3 months ago
Last analysis
2026-07-28 10:16 · 3 months ago
Hashes
MD5
dc4d962b312a55162ff130e222b9ab1f
Sha1
4840f5f2d98c91c7288a8be4c2876ab7d9fbfc73
Sha256
4a0c77e8d240cebd1d8bbabd14f8a815d35d561cc037f94d9c3acb9da21c41e3
Sha384
654d18ade0d49959a30c18a9a7d17b86d99c6b7d44051680b69bf0187da7f1fd8ab592878fc5ab09db074cca41026629
Sha512
36645e227a8c1b987bee4bd66bf1cf51be6d85aada055c8c37546fe27a4f40af4b2b3dd42bbb09457308a0ca8eba1f72d8e0afa40838ffb86be108cf8d843da0
SSDeep
192:puSUpExoTlUReiW47X8Lv4n+Ec/Rty21f8UYKCWvrh8YMtQ0ttT5r+:pulpz+hr8LvZRUUYnCAp+
TLSH
0B42B020EF47F931E6E5457104F6786CBA0593B6DD82EA5E8167560CE3B04FB15CA83C
3 malicious · 4 files
ZIPdc4d962b312a55162ff130e222b9ab1fT1059.001 · T1059.003 · T1204.002LOLBin
MP4VID_20260727_194251.mp4
LNKIMG_20260728_004931.jpg.lnkT1059.001 · T1059.003 · T1204.002LOLBin
SHLNK CommandLine
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
Structural branches: 2
STICH kept: 1secondary ignored: 1
bin
1Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
arc:zip>lnk~T1059.001~T1059.003~T1202~T1204.002>lnk:cmd
Shape
arc:zip>lnk>lnk:cmd
malicious
3 nodes
LNK: Command Execution
UNKNWOWNmalicious
powershuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential3 malicious · 4 files
ZIPdc4d962b312a55162ff130e222b9ab1fT1059.001 · T1059.003 · T1204.002LOLBin
MP4VID_20260727_194251.mp4
LNKIMG_20260728_004931.jpg.lnkT1059.001 · T1059.003 · T1204.002LOLBin
SHLNK CommandLine
No malware configuration was found at this point.
LNK: Command Execution
UNKNWOWNmalicious
powershuhuhuhuhuhuhuhuhuhuhu
dc4d962b312a55162ff130e222b9ab1f › IMG_20260728_004931.jpg.lnk
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with EssentialSign in or create a free account to view the matching YARA rules.
Create a free account