Deep Malware Analysis of 1cc61123e85f15bb4ee40e3a11784243 | md5: 1cc61123e85f15bb4ee40e3a11784243 | Zip Archive | LNK | Malicious | LOLBin | LOLBin:powershell.exe | Execution: CMD in LNK | T1059.003 | T1202: Indirect Command Execution | T1204.002 | Execution: PowerShell in LNK | T1059.001 | PowerShell | Batch Command | PowerShell Call

Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

MD5	1cc61123e85f15bb4ee40e3a11784243
Sha1	b8af4502530282efd3b60f622b20ded9e19f564d
Sha256	cb2dd0ca49f2b01b684d38f85e710781d8bfcb87b995ab2482ada5b7275c311b
Sha384	4826c2089a013a440b118a1bae714101fc4f3928fc60187aa0f579cdb493226279ff38cc55e6ee5a228343694567064c
Sha512	d87d85c19dc9ae2bdcc81b7477a054acea742a1a3850a0c309cf8c6a08c017340a786adb54f52377ece99cc27940a95d2f3525d9d5e393bf5901e296922a6e52
SSDeep	96:yYUWkY4srlMriTcK/1nO7rK/BzHc4H2TJ9pNjc2RpVbGe/YY7n7sAkt:ESZMrqcK/1nOgTcJlSwb9l7n7s/
TLSH	D0B16D1AE08556F6CBF774BAF48341CD9188C9CE5BB14682F42375EC80617F961E4768

STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

Structural branches: 2 STICH kept: 1secondary ignored: 1

bin 1

Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.

Path arc:zip>lnk~T1059.001~T1059.003~T1202~T1204.002>lnk:cmd

Shape arc:zip>lnk>lnk:cmd

malicious 3 nodes

LNK: Command Execution UNKNWOWNmalicious

powershuhuhuhuhuhuhuhuhuhuhu

Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.

Unlock with Essential