Deep Malware Analysis of 0ce9bab8bb78e75a0ce1892df5cfa80e | md5: 0ce9bab8bb78e75a0ce1892df5cfa80e | Zip Archive | LNK | Malicious | LOLBin | LOLBin:cmd.exe | Execution: CMD in LNK | T1059.003 | T1202: Indirect Command Execution | T1204.002

Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

MD5	0ce9bab8bb78e75a0ce1892df5cfa80e
Sha1	8dc22495af778c35cf28ffd8db1cfd3a71f75cd0
Sha256	4893980ab18f03638922df80f357e27430f9004f506d31695658ff547f159929
Sha384	cd2fd7e72e4053c10c230f047a1f4b6449b29465e9da956338cc01e7f9b7df182f90ca61afd0689d68b726209e140109
Sha512	ba8165b926c6337b0502b1a594e544710c575ef4d453e20dbd1fea45d4821580d0c160972936de99cc3a6adc07b3d8cbb454c99afa0f89c77d164d6c6adf477c
SSDeep	12:5j+4/S6iqKpDaLriYJipLtIY1fxL3jd5Lw2hqeb7dEBcKNach4uaoT:9lS6iqKsFcltIY1fpzvwzebhEGcfT
TLSH	E8F041F7CA3C0102D94884737A5177B06AA54A18816D85E8292AC807A5151C22F54C41

STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.

Path arc:zip>lnk~T1059.003~T1202~T1204.002

Shape arc:zip>lnk

malicious 2 nodes

LNK: Command Execution UNKNWOWNmalicious

cmd.exhuhuhuhuhuhuhuhuhuhuhu

Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.

Unlock with Essential