Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
File
Type
ZIP archive
Size
12.31 KB · 12,309 B
First seen
2026-07-25 10:34 · 3 months ago
Last seen
2026-07-25 10:34 · 3 months ago
Last analysis
2026-07-25 18:48 · 3 months ago
Hashes
MD5 ee652b04ce78904de52f0e39df52079c Sha1 b5950b65b3c36eed38dfa4852215f6db22d1d95f Sha256 8a9a2498b4a604c762b2d9332d11858c7d9780f538122b9f5036c1e3ce12d19f Sha384 fc19b0580fe3652f1c98a69ee14888da37659a52041229d2592f67940261d19f232905fdff7c8b0bf6d5549e6d3ed451 Sha512 d5133323466aa38959717591551d6ac7f907329a89b03e39bbbd6025769fd1b68524fd3c34fee1039d2c1008e364053e108479e29049f4acd69980d36db4a64e SSDeep 384:lREbCZuCFm+BeNdBrOLTHvWwC9hPDA89k:l6bUpm//oHdC9hbF2 TLSH 2C42CEBB50585372E01304F44A0EAE87E14D2FFBC88925F3ABEA54A031D52C5277C7B5
3 malicious · 4 files
ZIPee652b04ce78904de52f0e39df52079cLOLBin
MP4VID_20260724_183809.mp4
LNKIMG_20260724_125247.jpg.lnkLOLBin
SHLNK CommandLine
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

Structural branches: 2 STICH kept: 1secondary ignored: 1
bin 1

Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
Path arc:zip>lnk~T1059.001~T1059.003~T1202~T1204.002>lnk:cmd
Shape arc:zip>lnk>lnk:cmd
malicious 3 nodes
LNK: Command Execution UNKNWOWNmalicious
powershuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential
3 malicious · 4 files
ZIPee652b04ce78904de52f0e39df52079cLOLBin
MP4VID_20260724_183809.mp4
LNKIMG_20260724_125247.jpg.lnkLOLBin
SHLNK CommandLine
No malware configuration was found at this point.
LNK: Command Execution UNKNWOWNmalicious
powershuhuhuhuhuhuhuhuhuhuhu
ee652b04ce78904de52f0e39df52079c › IMG_20260724_125247.jpg.lnk
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential
Sign in or create a free account to view the matching YARA rules. Create a free account
An error has occurred. This application may no longer respond until reloaded. Reload 🗙