Malicious
de991a8658c1ebe7b79d147a95a7995a
ZIP Archive
MD5: de991a8658c1ebe7b79d147a95a7995a
Size: 7.31 KB
application/zip
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
ZIP archive
Size
7.31 KB · 7,313 B
First seen
2026-07-28 06:48 · 3 months ago
Last seen
2026-07-28 06:48 · 3 months ago
Last analysis
2026-07-28 06:48 · 3 months ago
Hashes
MD5
de991a8658c1ebe7b79d147a95a7995a
Sha1
8834302fbbe849246388bc25f7c44a00d3f5cc92
Sha256
c8169f32c82c71a2216fb081cb9754f0f75071e1ffecd6613b04d67f0657a947
Sha384
a228db95c0e37c2619898f5f965dfd3e09ede64232b7d2c683f5e59f4cd2d9f0cfad96d9d52ccf2fadbda26d87e1282d
Sha512
d8ab89a2177b8bfe2cedd11021f0266518b85f1792bd394661856e55f6080cf1b8acc80944c1ae7507c142951573bf375f71c313a4e42d14e82d8f6b2698d323
SSDeep
192:YstUl3CqmSXEFWozWDQQpGjYG6BE0zA87g6:YstUl3C8ej3OYYJK0zA8s6
TLSH
56E1B0DA90918BA0FD7767FCE26B097CB74108113128BA1F90E405BE8BB797288D855F
3 malicious · 4 files
ZIPde991a8658c1ebe7b79d147a95a7995aT1059.001 · T1059.003 · T1204.002LOLBin
MP4VID_20260727_074050.mp4
LNKIMG_20260728_054943.jpg.lnkT1059.001 · T1059.003 · T1204.002LOLBin
SHLNK CommandLine
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
Structural branches: 2
STICH kept: 1secondary ignored: 1
bin
1Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
arc:zip>lnk~T1059.001~T1059.003~T1202~T1204.002>lnk:cmd
Shape
arc:zip>lnk>lnk:cmd
malicious
3 nodes
LNK: Command Execution
UNKNWOWNmalicious
powershuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential3 malicious · 4 files
ZIPde991a8658c1ebe7b79d147a95a7995aT1059.001 · T1059.003 · T1204.002LOLBin
MP4VID_20260727_074050.mp4
LNKIMG_20260728_054943.jpg.lnkT1059.001 · T1059.003 · T1204.002LOLBin
SHLNK CommandLine
No malware configuration was found at this point.
LNK: Command Execution
UNKNWOWNmalicious
powershuhuhuhuhuhuhuhuhuhuhu
de991a8658c1ebe7b79d147a95a7995a › IMG_20260728_054943.jpg.lnk
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with EssentialSign in or create a free account to view the matching YARA rules.
Create a free account