Malicious
ZIP Archive
MD5: ebbac374bd345461111eb3247625f714
Size: 6.83 KB
application/zip
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
ZIP archive
Size
6.83 KB · 6,832 B
First seen
2026-07-28 06:48 · 3 months ago
Last seen
2026-07-28 06:48 · 3 months ago
Last analysis
2026-07-28 06:48 · 3 months ago
Hashes
MD5
ebbac374bd345461111eb3247625f714
Sha1
64e8af253702721c7ee944883d5593621616b979
Sha256
6d4e6fb390195db91c266ea680cd97508b7688345984e84affcad6587179ba4b
Sha384
db47b6394106b094240c99da34240d3a9a3a9abfaac9fd14c81123195b33ae4058b35611fae98302e65a399eaebc12ce
Sha512
b65ce56da47900a1ea01a4d48c3cf2a5cad488116e7ab78df47a10d8bff2a44594936f4558dc6529d415a9ed96fabb51a36ac048ac3a3883a3a916f4f321a6a8
SSDeep
96:Gjr2fG6GL87PP2lYOA6LkbBHLpgMbN8+mrNXRCvIrVRXdc3wPZWlFKTbh86OKbQs:oKBPGYONLkNHLpgMbNn9gt9xV+6ZQs
TLSH
10E1BFEE58BB1404E5C1F121B9FD22BFC01CD488E49613915EA9B5EC3222F10ECC559F
3 malicious · 4 files
ZIPebbac374bd345461111eb3247625f714T1059.001 · T1059.003 · T1204.002LOLBin
MP4VID_20260728_053902.mp4
LNKIMG_20260727_205856.jpg.lnkT1059.001 · T1059.003 · T1204.002LOLBin
SHLNK CommandLine
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
Structural branches: 2
STICH kept: 1secondary ignored: 1
bin
1Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
arc:zip>lnk~T1059.001~T1059.003~T1202~T1204.002>lnk:cmd
Shape
arc:zip>lnk>lnk:cmd
malicious
3 nodes
LNK: Command Execution
UNKNWOWNmalicious
powershuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential