Deep Malware Analysis of 028c312b441dca35be5ef177e3035488 | md5: 028c312b441dca35be5ef177e3035488 | Zip Archive | LNK | Malicious | LOLBin | LOLBin:cmd.exe | Execution: CMD in LNK | T1059.003 | T1202: Indirect Command Execution | T1204.002

Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

MD5	028c312b441dca35be5ef177e3035488
Sha1	5c695cede979d6d0bf2ab9023ad26cc659617d8f
Sha256	bfbeebcafb691f602c1a1a9f4b28988fda40a11e70072fa2ea2e005b0e42171e
Sha384	a5dd30c42b21418d51eba1de94ca10c114855881a514ad4dabff12412950ba2bdbb15462dae5cef318a3b17386872ffb
Sha512	f93a76c9f058be20992f5ff9fdbb39d1e7c9a71b7b789f983a283f88b607ac9f3f9d609c516b6c1d892c53352ce06320b5a9fb0c1724e4b8f957d0bfe5b1cb5a
SSDeep	12:5jGLkIqLiPUWiU5to48D/HqR1ttYZCJ9KaM0H2bAzi9fRnIfaoAt:9GLk9LMiUfozKR1ttOCJ9a0H20i9RnIW
TLSH	87F0413D87505809D92280BE5C77AD88E511D1860F280F0681B7D0023D6EBC329423A7

STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.

Path arc:zip>lnk~T1059.003~T1202~T1204.002

Shape arc:zip>lnk

malicious 2 nodes

LNK: Command Execution UNKNWOWNmalicious

cmd.exhuhuhuhuhuhuhuhuhuhuhu

Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.

Unlock with Essential