Malicious ZIP Archive (LOLBin) analysis – 51828a617003

Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

Unlock with Essential

File

Type

ZIP archive

Size

8.87 KB · 8,869 B

First seen

2026-07-28 10:16 · 3 months ago

Last seen

2026-07-28 10:16 · 3 months ago

Last analysis

2026-07-28 10:16 · 3 months ago

Hashes

MD5 f3e9bccc6a1a1a023b196b8c4fae4306 Sha1 874cfc4897cdf4e969f4548c6eb926ebfba07343 Sha256 51828a61700300d2b96d24d50c813b849db201b4266c5fa4785579f6d790e163 Sha384 0ca4ac3fdf95289556cc542f23d8a065f37a5c3bdb342b11108dd13f286ded60d6ca0c41ad62c7ab4927665495266e1f Sha512 3044e967dc34d582b685e97608eaa24caa2d6cf4356ebe971fa046bc86a4fa09e8da5bf5e9c4306759313e6b0926a473b9577f32901877728091981789d6384a SSDeep 192:aPVnNbzEB3vgZRF9mT+1PXLBX68Qa095DMM079MIse+qoc:abbz+3It9jXLBK8Qa0JKMIsYoc TLSH 03029E4FDC87B888E020DC7367A0A9763000151B04C98F86BAB5A36E425EC1965EE2CF

3 malicious · 4 files

ZIPf3e9bccc6a1a1a023b196b8c4fae4306LOLBin

MP4VID_20260727_185850.mp4

LNKIMG_20260727_121009.jpg.lnkLOLBin

SHLNK CommandLine

STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

Structural branches: 2 STICH kept: 1secondary ignored: 1

bin 1

Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.

Path arc:zip>lnk~T1059.001~T1059.003~T1202~T1204.002>lnk:cmd

Shape arc:zip>lnk>lnk:cmd

malicious 3 nodes

LNK: Command Execution UNKNWOWNmalicious

powershuhuhuhuhuhuhuhuhuhuhu

Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.

Unlock with Essential