Malicious
ZIP Archive
MD5: f77acea0344aba66b8cd6e9078b87e3a
Size: 644 B
application/zip
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
ZIP archive
Size
644 B · 644 B
First seen
2026-07-14 04:31 · 3 months ago
Last seen
2026-07-14 04:31 · 3 months ago
Last analysis
2026-07-14 04:31 · 3 months ago
Hashes
MD5
f77acea0344aba66b8cd6e9078b87e3a
Sha1
9c26a2bba76edf0891870dd1bdc7c786a2b43145
Sha256
7f6fd336bcaf1c234ec7dece88d47eee9a29975359faddb87145a2c5d9541c73
Sha384
c8f8d3a4fe0673176c5896fd1b7335f2bf00fd4c14b1323aa35c11d17afb6eb09f97ddf2973cb740f039b78b8d564046
Sha512
0093258040a796d1d008e78fedd35a4d17bea9a54426e26a06921d1f4dba5658777a11e2b6f8986df883cbc8fecf280facbb212d72841b93d0e87e34ace35a40
SSDeep
12:5jsfYO1/8VZZOBoa5vzCPXRcyzm1O8Vwky1OYiAo4/DYJw4xoys7yYObdsm4cO8c:9sf98YoOveCyzmPmZjv/DYJJxE7y6mYt
TLSH
EFF0DDA1CE57F180EE85D13264141A0D13608F978309B9876B29380AF9C5AC4E3455E9
8 malicious · 10 files
ZIPf77acea0344aba66b8cd6e9078b87e3aT1027 · T1059.001 · T1059.003LOLBin
LNKphotos-2026c-1106037895593.lnkT1027 · T1059.001 · T1059.003LOLBin
SHLNK CommandLineT1027 · T1059.001
PS1[PowerShell Command]T1027 · T1059.001
PS1[Deobfuscated PS]T1059.001
PS1[Lnk Summary]T1027 · T1059.001
PS1[PowerShell Command]T1027 · T1059.001
PS1[Deobfuscated PS]
LNKvideo-1106037895593.mp4
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
3 / 3
Path
arc:zip>lnk~T1059.001~T1059.003~T1202~T1204.002>lnk:cmd>scr:ps1~T1027~T1059.001
Shape
arc:zip>lnk>lnk:cmd>scr:ps1
malicious
4 nodes
Path
arc:zip>lnk~T1059.001~T1059.003~T1202~T1204.002>scr:ps1~T1027~T1059.001
Shape
arc:zip>lnk>scr:ps1
malicious
3 nodes
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
Deobfuscated PowerShell
UNKNWOWNmalicious
"iex(ihuhuhuhuhuhuhuhuhuhuhu
Deobfuscated PowerShell
UNKNWOWNmalicious
Invokehuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential