Deep Malware Analysis of 26b3f7856483622397d512ae6bc1eb2e | md5: 26b3f7856483622397d512ae6bc1eb2e | LNK | Malicious | LOLBin | T1218: System Binary Proxy Execution | LOLBin:cmd.exe | Execution: CMD in LNK | T1059.003 | T1202: Indirect Command Execution | T1204.002

Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

MD5	26b3f7856483622397d512ae6bc1eb2e
Sha1	fa01294450cb975c455cd6e6e70fcc9261ce24f6
Sha256	6e6d4084c6c2f3035c2fbda4daf4b705a06938d73bf91f402552b6d4ab522d9b
Sha384	ef5bd7c6801b6baa547f1482795fe5412ca35a547d35bafea27f33e52e8ca32dd6ff33e0e9aaa253f63175c0f0dbbc0c
Sha512	a01d6afa674ae2e36d6d1aade68c76cb388e192e23f435bf940c94a8b40eb58a786e717cfa0b9391d3143db80c6fab55874d137ee107ee08339e1b4f1d2bdb7c
SSDeep	24:8YAJtnyUD2+pXTWMLhXc1UlM7kPdlvhMOt0lb+muQMaerqddNXuHY:81SaxX3SkPnvWOCQN+dLXuH
TLSH	944122803BE94689F2BB6E369CBE575489BAB8D16D30C11D0840C64CA425B07DB7FB63

STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.

Path lnk~T1059.003~T1202~T1204.002~T1218

Shape lnk

malicious 1 nodes

LNK: Command Execution UNKNWOWNmalicious

cmd.exhuhuhuhuhuhuhuhuhuhuhu

Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.

Unlock with Essential