Deep Malware Analysis of 294451bea259b55a70d18887accbf1c9 | md5: 294451bea259b55a70d18887accbf1c9 | Zip Archive | LNK | Malicious | LOLBin | LOLBin:powershell.exe | Execution: CMD in LNK | T1059.003 | T1202: Indirect Command Execution | T1204.002 | Execution: PowerShell in LNK | T1059.001 | PowerShell | Batch Command | PowerShell Call

Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

MD5	294451bea259b55a70d18887accbf1c9
Sha1	7a04155c49cf8081b8a194abe83443a68b35b3ae
Sha256	de3aa431b761a195fabb3311b67c7fc107105b6946adfd5e7fb2b7bdb71a6c29
Sha384	d92d6ff642c6ec0f50b9455d85500c5233995b0a715a7b8096797647eeb85ae72b390583d4e4f79b611fd107bdc1af23
Sha512	a6b143cd7983177c418d971b645638971c31a8f4c59c676a5b138a989ed52b9d71a7571bb67a590fff70fe4e8c80a6cbb3255368779108b69e804d523b7515a3
SSDeep	384:MGQF1k9y7thNLgHwLHumQuizY9Pqv6bARIqgB:MGQF1brJ4wLHZQuizSo6bAR+
TLSH	E842C04DD0279052A76EC4BAB442AA712E1A5AC6FDD300D3AFE5CEDD9F53AC70701252

STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

Structural branches: 2 STICH kept: 1secondary ignored: 1

bin 1

Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.

Path arc:zip>lnk~T1059.001~T1059.003~T1202~T1204.002>lnk:cmd

Shape arc:zip>lnk>lnk:cmd

malicious 3 nodes

LNK: Command Execution UNKNWOWNmalicious

powershuhuhuhuhuhuhuhuhuhuhu

Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.

Unlock with Essential