Malicious ZIP Archive (LOLBin) analysis – 7400f7aac37c

Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

Unlock with Essential

File

Type

ZIP archive

Size

1.28 KB · 1,279 B

First seen

2026-07-27 12:18 · 3 months ago

Last seen

2026-07-27 12:18 · 3 months ago

Last analysis

2026-07-27 12:18 · 3 months ago

Hashes

MD5 f7fbed8735964ec0c599fa142e942163 Sha1 fa3704d9bb18fb0e480c7313d015608f52005375 Sha256 7400f7aac37cda0c5d39195928cd89a48039ae12a4910260b2acbef79cb20997 Sha384 ee82554a9de74eee854b5cb369f17624b508fdf548c9be848821e249c6b6d834e046f0bf2fa30189ba4de62d2a2faf4c Sha512 8547f6f61fd56d7b2d7d556dd806b57fa1b2b80b89537816d5fa6bd9f03d5e9809df2e3f2190e0bfdb20c616f505c15fc68b615e35f66876c5df21f4be3fcaff SSDeep 24:9oDghrS2SkdC7uRQg5FRDpZnFcmScWH5G3Adj3:9oIrrSkEWQgdFcPmST TLSH 6321B7D9482DCD96C6268EBB5E22490621386446570062A1F38FAAF12DCE14C726A364

6 malicious · 8 files

ZIPf7fbed8735964ec0c599fa142e942163LOLBin

LNKphotov_698290322043.lnkLOLBin

SHLNK CommandLine

PS1[PowerShell Command]

PS1[Deobfuscated PS]

BIN[Lnk Summary]

LNKvideoa_405718242202.mp4

STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.

Path arc:zip>lnk~T1059.001~T1059.003~T1202~T1204.002>lnk:cmd>scr:ps1~T1027~T1059.001

Shape arc:zip>lnk>lnk:cmd>scr:ps1

malicious 4 nodes

Path arc:zip>lnk

Shape arc:zip>lnk

2 nodes

LNK: Command Execution UNKNWOWNmalicious

%COMSPhuhuhuhuhuhuhuhuhuhuhu

Deobfuscated PowerShell UNKNWOWNmalicious

$usfx6huhuhuhuhuhuhuhuhuhuhu

Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.

Unlock with Essential