Malicious ZIP Archive (LOLBin) analysis – 38e4665d95b9

Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

Unlock with Essential

File

Type

ZIP archive

Size

13.05 KB · 13,052 B

First seen

2026-07-31 06:16 · 2 months ago

Last seen

2026-07-31 06:16 · 2 months ago

Last analysis

2026-07-31 06:16 · 2 months ago

Hashes

MD5 f96bfc93c03396d2a74faeb7dc97c0ee Sha1 fcad8309ff956bb92f9149ef1df87c7951eccecf Sha256 38e4665d95b960107fa0be56f3590831f96120a385373b469c284777db6e96a9 Sha384 4331ad6a5fd1e1bd305fbd85dedf97679803179fa137e7a2ea4832942c89a9acedcc0fd5ec149e1002c90cdd6ade61e8 Sha512 87aadb9599124cd5a9758870559db67dcc20e54e1e066f48ccdbfb47b65ce0127033b4812ef0111fa0aa7112cede79b0e62b138d9ea1b602a6228b998b815565 SSDeep 384:oggXZdrSbo7TmR3toIn8hjuG+LYI5zMdkYA:iXb2byT+3toM8hjuG+35ziA TLSH F442C08BC5B6E113F169A0F1C54F4C8FB79914CBA6D1B288BCFD09810BBC69E1652D45

3 malicious · 4 files

ZIPf96bfc93c03396d2a74faeb7dc97c0eeLOLBin

MP4VID_20260730_091854.mp4

LNKIMG_20260731_010107.jpg.lnkLOLBin

SHLNK CommandLine

STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

Structural branches: 2 STICH kept: 1secondary ignored: 1

bin 1

Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.

Path arc:zip>lnk~T1059.001~T1059.003~T1202~T1204.002>lnk:cmd

Shape arc:zip>lnk>lnk:cmd

malicious 3 nodes

LNK: Command Execution UNKNWOWNmalicious

powershuhuhuhuhuhuhuhuhuhuhu

Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.

Unlock with Essential