Deep Malware Analysis of 0cae9689f6dcc1b23586493be5cbd71f | md5: 0cae9689f6dcc1b23586493be5cbd71f | Zip Archive | Executable | PE (Portable Executable) | PE File Layout | PDB Path | LNK | Malicious | LOLBin | T1218: System Binary Proxy Execution | LOLBin:cmd.exe | Execution: CMD in LNK | T1059.003 | T1202: Indirect Command Execution | T1204.002

Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

MD5	0cae9689f6dcc1b23586493be5cbd71f
Sha1	2859c845b567e4fb2da9b13a8c81d384a2a2f2ff
Sha256	5a15f996dd4157ea7e88ed80d6a77dfcdd81f54305f4414fee99bd609d01f1b4
Sha384	8a35a3e0f4a233f305b70a0eb3c260d8c8416b1761ebd517fc3336dc6580766be28392452c22b1ea87e71b130c2c499a
Sha512	5570808a75c0d115bba026d6b37ddb9d3b45692140f0bf546f0494fe582a5c0fd881998815252c7ba6a8a0f8f51d6d5ebd5fdf5caf8f9f8902cbbeac46f2bb25
SSDeep	1536:k2s0OZgJ+92XTlvDsyb+T3/oOmGOOoQqPbKrDyhxfA4McCmaRJ+We+zU5YC5AWtM:XVl+Tg7DZKiT7MmaZJU5x6Wtq3v
TLSH	EAE31223E5342FC5F4E61D34F132658DEE2569D78263EBFCE70E33682845AA714A940E

STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

Structural branches: 5 STICH kept: 1secondary ignored: 4

bin 4

Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.

Path arc:zip>img:disk>lnk~T1059.003~T1202~T1204.002~T1218

Shape arc:zip>img:disk>lnk

malicious 3 nodes

LNK: Command Execution UNKNWOWNmalicious

cmd.exhuhuhuhuhuhuhuhuhuhuhu

Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.

Unlock with Essential