Deep Malware Analysis of 2317dfc356f832a38b8a594d4444760f | md5: 2317dfc356f832a38b8a594d4444760f | LNK | Malicious | LOLBin | LOLBin:powershell.exe | Execution: CMD in LNK | T1059.003 | T1202: Indirect Command Execution | T1204.002 | Execution: PowerShell in LNK | T1059.001 | PowerShell | Batch Command | PowerShell Call

Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

MD5	2317dfc356f832a38b8a594d4444760f
Sha1	fc8d59efaf41ee147b1181f1b9756fd5fa785160
Sha256	0a94b36daa940e3fca91536da93dd53186b7c9a5af35c95c626b31e57047be83
Sha384	f4f86f549770308162d6fe800024fcd3284c5f842c2a6222d7f6c1ad8457cf965971e7a2dc3b3a7034e49d7e67453a2e
Sha512	4f5d0b4a6d013ef013fb3b96081b9204e402b82568ef0724cab11c372c6e5a8f42d99c67c69808c1ec8f6e98866b29e85e55b7c360f01da2746f27fe03bb10be
SSDeep	24:8nMNjmJd6XkW/w24uDXn67D65FOhwNeDNdjAGcevcwYL4o0CW:84iJd8TnHshwe56oo
TLSH	6F51382967E40105F9F34BBBE9FEF40278B0BD99A401D9895186910C44B1649EDFBF3B

STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.

Path lnk~T1059.001~T1059.003~T1202~T1204.002>lnk:cmd

Shape lnk>lnk:cmd

malicious 2 nodes

LNK: Command Execution UNKNWOWNmalicious

powershuhuhuhuhuhuhuhuhuhuhu

Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.

Unlock with Essential