Deep Malware Analysis of 1c709f7f33460ae149bb042b3559c49b | md5: 1c709f7f33460ae149bb042b3559c49b | LNK | Malicious | LOLBin | LOLBin:cmd.exe | Execution: CMD in LNK | T1059.003 | T1202: Indirect Command Execution | T1204.002 | Execution: PowerShell in LNK | T1059.001 | PowerShell | Batch Command | PowerShell Call | T1027 | DeObfuscated

Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

MD5	1c709f7f33460ae149bb042b3559c49b
Sha1	d214ab4901d81907b8034dbe7632e9268d531b2d
Sha256	da50eb6030b8760f13c2e1fbd9d325b15f06e5c6f015b38c2c2ffde870b7ac0c
Sha384	79134e6b4c5f106139f8f779dd634f9341393c5f7feabd6082f86d8d1c7c3530daa3cb381a037d53b976c8ab52a6b341
Sha512	0eb8835692b5b43a2f107948788aac85600155de619929f945cd12a9bbeb22ad9fccd6621d1a63d1576cf08cd7ce913c601c8e0dc568ee4f2d20bf79fd72c2a5
SSDeep	48:88Ggh3H2/XBvSSXtrSEdWSLkRTg0Xi2fjjCZaYwmYXuj:88BX2/RsEdW5W2PCZafm6uj
TLSH	A851B219A99A648CF9FF50B125FCBB5091B638CE67891BE1407CB658E3D2BC84CC41EC

STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.

3 / 3

Path lnk~T1027~T1059.001~T1059.003~T1202~T1204.002>lnk:cmd~T1027~T1059.001>scr:ps1~T1027~T1059.001

Shape lnk>lnk:cmd>scr:ps1

malicious 3 nodes

Path lnk~T1027~T1059.001~T1059.003~T1202~T1204.002>scr:ps1~T1027~T1059.001

Shape lnk>scr:ps1

malicious 2 nodes