Deep Malware Analysis of 275bc1f48dbbb6d140972a08d4fe61f4 | md5: 275bc1f48dbbb6d140972a08d4fe61f4 | Zip Archive | LNK | Malicious | LOLBin | LOLBin:powershell.exe | Execution: CMD in LNK | T1059.003 | T1202: Indirect Command Execution | T1204.002 | Execution: PowerShell in LNK | T1059.001 | PowerShell | Batch Command | PowerShell Call

Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

MD5	275bc1f48dbbb6d140972a08d4fe61f4
Sha1	e052256ce1e56c5641c52b68954215ddc1071f6a
Sha256	53c5022aa1f6ce11f9bdc74231ea47ecbc6c91c54a3ca4a25ba730107bad556f
Sha384	50bb95006b754780f8cb38e3027aaf3f847394a1e3e56164cbae7f9ea2804647f0e789a6a41ace7cf0f20aff750c0a30
Sha512	708a83726303282d44a33c98a2c2b80f2118aa07c0b3f987bba5904d5629610890003e5daa889d030cc5993b0cb06a9df34f18d906a8b077cd29dff1117dfe3b
SSDeep	96:UtBXnVYp6rUyxlyJOC7nZGS9hw8X1cFjnGo:UtBXnVxrUyQOC7nUSjJKdnGo
TLSH	34718DCE12216917C0C9BC3E49A8B8754717C0E0E3C98E7EC42C63091BC2A336D5E5CD

STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

Structural branches: 2 STICH kept: 1secondary ignored: 1

bin 1

Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.

Path arc:zip>lnk~T1059.001~T1059.003~T1202~T1204.002>lnk:cmd

Shape arc:zip>lnk>lnk:cmd

malicious 3 nodes

LNK: Command Execution UNKNWOWNmalicious

powershuhuhuhuhuhuhuhuhuhuhu

Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.

Unlock with Essential