Deep Malware Analysis of 19301deb90b9d389c11cc3f42a57e497 | md5: 19301deb90b9d389c11cc3f42a57e497 | Zip Archive | LNK | Malicious | LOLBin | T1218: System Binary Proxy Execution | LOLBin:cmd.exe | Execution: CMD in LNK | T1059.003 | T1202: Indirect Command Execution | T1204.002 | SOS: 0.24 | DeObfuscated | VBScript | T1059.005 | Obfuscated | T1027

Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

MD5	19301deb90b9d389c11cc3f42a57e497
Sha1	870bb87a0b864b5d0d489e2c255b70ea4a77b412
Sha256	c8d26193bd380fef85c94a0ddeb293e3154cc096164291e85bfc6ee9efef289e
Sha384	621b6154b811cac9901c44c04b35a22984674b20a230651c94833a57b75e1c850de69112e6b8f8ec0a400cfe1b8255c2
Sha512	93918853e4da59d53df83510632b0e2024a756c33c14d243c7114ee69f63ac9367f73a570fe1ffb251909493e96124055e96eba8f65b368b6200e7a05e9482ec
SSDeep	1536:mrCRSI0OpQcfRuLWofF/YrQf6ZhrCRSI0OpQcfRuLCgUSaMZUEdZY18M2RpbbFa:4whBplfkKZJwhBplfk3Zy
TLSH	E0734B94FBF743A0FA6946F908C41EB5EA39AC9FC190014B79270559452A073BBFF368

STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.

Path arc:zip>lnk~T1059.003~T1202~T1204.002~T1218

Shape arc:zip>lnk

malicious 2 nodes

Path arc:zip>scr:vbs~T1027~T1059.005

Shape arc:zip>scr:vbs

technique2 nodes

LNK: Command Execution UNKNWOWNmalicious

cmd.exhuhuhuhuhuhuhuhuhuhuhu

Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.

Unlock with Essential