Deep Malware Analysis of 1fa724f588a489efa5a371d69a8793d0 | md5: 1fa724f588a489efa5a371d69a8793d0 | Zip Archive | LNK | Malicious | LOLBin | LOLBin:powershell.exe | Execution: CMD in LNK | T1059.003 | T1202: Indirect Command Execution | T1204.002 | Execution: PowerShell in LNK | T1059.001 | PowerShell | Batch Command | PowerShell Call

Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

MD5	1fa724f588a489efa5a371d69a8793d0
Sha1	7f2287d2f58752cafd14a6c5d7471345ee360709
Sha256	14ec45fbdd2187afb5b7f942e507862da76e018e5adee8318090225cd7a59508
Sha384	34ff3b24403bba332dcb1e3293c65289f6852a5d76b68b2c59f5f19a91f17dfad828165ca2634df03d8bda77cacbeae8
Sha512	02390b85cfaaa0492610471e93e369cac3d7075537e51ef67fe086c5022eb9a6ab811017f9977a03d8903ed72234f3ed5692936e1c7e75d3abec4dc708d5f133
SSDeep	192:zCkhtxt4goF9ZGjuzaP+5cR3NQW7FInD4snouogxnIphrfGclB+fOmRMeQmwuBWq:Vhtxt4gQGjuJ5czQEMD4sobpMzMeQm5h
TLSH	1042D027DC90F9A3C0467560668DC384DC6CE7DB357831827189C2689639AC3987F3B3

STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

Structural branches: 2 STICH kept: 1secondary ignored: 1

bin 1

Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.

Path arc:zip>lnk~T1059.001~T1059.003~T1202~T1204.002>lnk:cmd

Shape arc:zip>lnk>lnk:cmd

malicious 3 nodes

LNK: Command Execution UNKNWOWNmalicious

powershuhuhuhuhuhuhuhuhuhuhu

Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.

Unlock with Essential