Malicious
df8d5ab7aa1dece08c34b87a52d21094
ZIP Archive
MD5: df8d5ab7aa1dece08c34b87a52d21094
Size: 6.89 KB
application/zip
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
ZIP archive
Size
6.89 KB · 6,890 B
First seen
2026-07-25 10:35 · 3 months ago
Last seen
2026-07-25 10:35 · 3 months ago
Last analysis
2026-07-25 18:46 · 3 months ago
Hashes
MD5
df8d5ab7aa1dece08c34b87a52d21094
Sha1
f52fa8ac2a5b4b9de3c09c73c88b37108c207b78
Sha256
e08684c7fda9791935329bc7725cf0dd436b43595dc19d43d914c6a60b50b0a2
Sha384
985ad497630b8d66d7e186dfca1a6b01bcb20bafe46ecf2740dbac1335cfdf4f102a08ebe10dca7bdf62127ad2f4254e
Sha512
0649a0209f2f8b26bddd764d8e5c62e5c1a6fb8449d6aee25c7a1db0e06cbe5233642b95c85637b4693c1b98c63e57ca7924113e23cd260dca5326214d4d3aef
SSDeep
192:uoyDvcpEJX5VWXlqQ+/6cCDig4mm0QiTI:41JpVskQR2b6E
TLSH
8DE1AE96C58D6453FDF7AB3AD6B4B58782744F45DAF84C8248784904E62012F1FBB0E1
3 malicious · 4 files
ZIPdf8d5ab7aa1dece08c34b87a52d21094T1059.001 · T1059.003 · T1204.002LOLBin
MP4VID_20260725_023142.mp4
LNKIMG_20260725_052527.jpg.lnkT1059.001 · T1059.003 · T1204.002LOLBin
SHLNK CommandLine
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
Structural branches: 2
STICH kept: 1secondary ignored: 1
bin
1Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
arc:zip>lnk~T1059.001~T1059.003~T1202~T1204.002>lnk:cmd
Shape
arc:zip>lnk>lnk:cmd
malicious
3 nodes
LNK: Command Execution
UNKNWOWNmalicious
powershuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential3 malicious · 4 files
ZIPdf8d5ab7aa1dece08c34b87a52d21094T1059.001 · T1059.003 · T1204.002LOLBin
MP4VID_20260725_023142.mp4
LNKIMG_20260725_052527.jpg.lnkT1059.001 · T1059.003 · T1204.002LOLBin
SHLNK CommandLine
No malware configuration was found at this point.
LNK: Command Execution
UNKNWOWNmalicious
powershuhuhuhuhuhuhuhuhuhuhu
df8d5ab7aa1dece08c34b87a52d21094 › IMG_20260725_052527.jpg.lnk
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with EssentialSign in or create a free account to view the matching YARA rules.
Create a free account