Deep Malware Analysis of 0773d3b4f1cda0057a857435d5b8b85b | md5: 0773d3b4f1cda0057a857435d5b8b85b | Zip Archive | LNK | Malicious | LOLBin | LOLBin:powershell.exe | Execution: CMD in LNK | T1059.003 | T1202: Indirect Command Execution | T1204.002 | Execution: PowerShell in LNK | T1059.001 | PowerShell | Batch Command | PowerShell Call

Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

MD5	0773d3b4f1cda0057a857435d5b8b85b
Sha1	0ae9524a98c02b3342936d087b4dac71a6efbc22
Sha256	e8a8f15404aff99d1c5ad2406ff7b6944f7164ce453684c49d93f3a43ee348e3
Sha384	c908e8575ae11f2305a939c52c17fb9d18294c91f069c74f00d17af840dd584e8f58d440638337d49649824083cd468e
Sha512	91109bd8d66b6010966ab6b3731f6ca8d6b9deec71dfc76114b8d6b64690db01f43626ebd8bdadf2a7d2226c741dccbcf98f6d57554804e15ef29d03e2a053f8
SSDeep	384:tMuqTQ8LthPh52Q47+0f/VXT1+5d20QtLI:SuuLZ52QC+eZT1Ud20cLI
TLSH	CF62D1B74D880BDC9AA175346A9B835B9AF249D74A80EFBF541FB711344B58C250C4EC

STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

Structural branches: 2 STICH kept: 1secondary ignored: 1

bin 1

Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.

Path arc:zip>lnk~T1059.001~T1059.003~T1202~T1204.002>lnk:cmd

Shape arc:zip>lnk>lnk:cmd

malicious 3 nodes

LNK: Command Execution UNKNWOWNmalicious

powershuhuhuhuhuhuhuhuhuhuhu

Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.

Unlock with Essential