Deep Malware Analysis of 1253350e8f7b8a3d1e376405bda645af | md5: 1253350e8f7b8a3d1e376405bda645af | Zip Archive | LNK | Malicious | LOLBin | LOLBin:powershell.exe | Execution: CMD in LNK | T1059.003 | T1202: Indirect Command Execution | T1204.002 | Execution: PowerShell in LNK | T1059.001 | PowerShell | Batch Command | PowerShell Call

Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

MD5	1253350e8f7b8a3d1e376405bda645af
Sha1	8397d89fd40fbc5c6370b812034aed2a759fc911
Sha256	380e458aaef47dab81b9093690f1607b1e339c58c63105d7bdc3e02092f9a037
Sha384	57ce5f89c279a60fd516ea88da78bd6f2b09fe4d6bcef4faa2b6675b38db9e62cd124936529292094db0346ea0a7b51b
Sha512	55383e5442afbb4afc9f79696c4839c8a04d4625c29f375cca249fa24cee8e1d270f901065a95d404aaaf508875cf7e6b8ed800bd64b596b884f1fe77411e493
SSDeep	384:j/a6M2JssqMgrSZ13A5s6+xZ7F456txISCwCCZLeSo:j/XT8MgrSZ1Q5s6+3F4stpCwLBeSo
TLSH	8F72C04682846BC99E6212BF73E2995399050570104C77737AFA1668D7C58C6C3FECFA

STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

Structural branches: 2 STICH kept: 1secondary ignored: 1

bin 1

Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.

Path arc:zip>lnk~T1059.001~T1059.003~T1202~T1204.002>lnk:cmd

Shape arc:zip>lnk>lnk:cmd

malicious 3 nodes

LNK: Command Execution UNKNWOWNmalicious

powershuhuhuhuhuhuhuhuhuhuhu

Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.

Unlock with Essential