Malicious
e2664f4ff5719cc31325c8cb03575e91
ZIP Archive
MD5: e2664f4ff5719cc31325c8cb03575e91
Size: 1.44 KB
application/zip
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
ZIP archive
Size
1.44 KB · 1,444 B
First seen
2026-07-25 10:50 · 3 months ago
Last seen
2026-07-25 10:50 · 3 months ago
Last analysis
2026-07-25 18:46 · 3 months ago
Hashes
MD5
e2664f4ff5719cc31325c8cb03575e91
Sha1
67b7444959bd7fb007832db6ce432ff40001d734
Sha256
1e8426200fb771992a460af1d715fdfeaaf3dab76e76292cead379f5261cae0f
Sha384
bbaec8fa232cce80d7e9ca35b8d73dca68aef9a1367b39ef3c1f02d53bc9d0db58831620355266974484bc2c0f1ef46d
Sha512
ab7149ffe89bd360dccbb949ecd78bcc5db2707f1bcb89a0a254b9af5d55b945e4247ff37a6e5f08455f9e0e6b64ff2f2ec0aa2c245a6972109df282d2f54cde
SSDeep
24:9ODZcB2pyllkFxX5H3ulqTitvcZBxVoHAw7c1qZI3ATP5wKBpcj1dQBjYp4FevrM:9OFLgXMH+lqetvcZBxVoHFA1sKATeKBF
TLSH
1531E90244474884C23E99FEA7FA895C2865B0F0112EA49DF406B2197D02BF5017E9C5
3 malicious · 4 files
ZIPe2664f4ff5719cc31325c8cb03575e91T1059.001 · T1059.003 · T1204.002LOLBin
MP4VID_20260725_012820.mp4
LNKIMG_20260725_055815.jpg.lnkT1059.001 · T1059.003 · T1204.002LOLBin
SHLNK CommandLine
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
Structural branches: 2
STICH kept: 1secondary ignored: 1
bin
1Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
arc:zip>lnk~T1059.001~T1059.003~T1202~T1204.002>lnk:cmd
Shape
arc:zip>lnk>lnk:cmd
malicious
3 nodes
LNK: Command Execution
UNKNWOWNmalicious
powershuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential3 malicious · 4 files
ZIPe2664f4ff5719cc31325c8cb03575e91T1059.001 · T1059.003 · T1204.002LOLBin
MP4VID_20260725_012820.mp4
LNKIMG_20260725_055815.jpg.lnkT1059.001 · T1059.003 · T1204.002LOLBin
SHLNK CommandLine
No malware configuration was found at this point.
LNK: Command Execution
UNKNWOWNmalicious
powershuhuhuhuhuhuhuhuhuhuhu
e2664f4ff5719cc31325c8cb03575e91 › IMG_20260725_055815.jpg.lnk
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with EssentialSign in or create a free account to view the matching YARA rules.
Create a free account