Deep Malware Analysis of 08e3d32539c7e989ef78ecdff3fc703b | md5: 08e3d32539c7e989ef78ecdff3fc703b | Zip Archive | LNK | Malicious | LOLBin | LOLBin:powershell.exe | Execution: CMD in LNK | T1059.003 | T1202: Indirect Command Execution | T1204.002 | Execution: PowerShell in LNK | T1059.001 | PowerShell | Batch Command | PowerShell Call

Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

MD5	08e3d32539c7e989ef78ecdff3fc703b
Sha1	8df0e0af51a1c81399b2c1b3c80293009ee0458b
Sha256	abb6b0f913a1f0d591ec92e302fa32ad717622255c1f511be2fe14253c95648c
Sha384	4fbfbf7297b9007624f7528c0b979f172f130618386c4fa9b4a49237ea9cf232ece8f0ea39b21b22cd878e700e735be6
Sha512	d04fa68652cb8c2011a4b9d62dc188b99ad88b329d8f71b5491bec69fd4b07a0d77e2f8d689bf7de42f52f825e35195089a7acd1379700222a6e84990a6f3961
SSDeep	96:/wedz6V5V/oN+QvU5A8BfjL7E7xE9f7hVzRNqLSyXWAxKH+QF3bR2cEj0W:/756Ng8QvUlljJX9NQ2lHrDO
TLSH	FDD18E7FE08194ECF9BFB670BE8DBF9E14351D48BA4F9444651837828EA100BEB19506

STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

Structural branches: 2 STICH kept: 1secondary ignored: 1

bin 1

Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.

Path arc:zip>lnk~T1059.001~T1059.003~T1202~T1204.002>lnk:cmd

Shape arc:zip>lnk>lnk:cmd

malicious 3 nodes

LNK: Command Execution UNKNWOWNmalicious

powershuhuhuhuhuhuhuhuhuhuhu

Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.

Unlock with Essential